CVE:CVE-2006-2964
CNNVD:CNNVD-200606-224
Xtreme Scripts Download Manager (Xtreme Downloads) 1.0存在多个PHP远程文件包含漏洞，远程攻击者可通过在(1)download.php，(2)manager.php，(3)admin/scripts/category.php，(4)includes/add_allow.php，(5)admin/index.php和(6)admin/admin/login.php内的root参数中的URL来执行任意PHP代码。
solution:Upgrade xtreme_scripts download_manager to a higher version than 1.0,and avoid the version 1.0