CVE:CVE-2006-4721
CNNVD:CNNVD-200609-185
CCleague Pro Sports CMS 1.0.1 RC1的admin.php中存在目录遍历漏洞，远程攻击者通过语言Cookie参数（该参数中包含..）序列和结尾的空(%00)字节读取和执行任意本地文件，如通过日志文件执行PHP代码所示。
solution:Upgrade ccleague pro_sports_cms to a higher version than 1.0.1_rc1,and avoid the version 1.0.1_rc1