CVE:CVE-2007-1855
CNNVD:CNNVD-200704-066
Shop-Script FREE的smarty/smarty_class.php中存在多个PHP远程文件包含漏洞。远程攻击者可以借助(1)_smarty_compile_path,(2)smarty_compile_path,(3)get_plugin_filepath,(4)smarty_dir和(5)filename参数中的一个URL，执行任意的PHP代码。
solution:Upgrade webasyst_llc shop-script to a higher version than *