CVE:CVE-2005-2633
CNNVD:CNNVD-200508-246
PHPTB Topic Board是一款开放源码的论坛程序。
PHPTB中存在多个远程文件包含漏洞，可能允许恶意的攻击者在web server上远程执行代码。
有漏洞的代码存在于./classes/board_o.php、./classes/dev_o.php、./classes/file_o.php和./classes/tech_o.php中：
 <?php
 include $absolutepath.'classes/smart_o.php';
 ... EOF
此外./classes/dev_o.php和./classes/tech_o.php中的漏洞代码：
 ...
 require $GLOBALS['absolutepath'].'userpass.php';
 ... EOF
solution:Upgrade phptb topic_boards to a higher version than 2.0,and avoid the version (,2.0]