CVE:CVE-2005-0565
CNNVD:CNNVD-200505-329
phpWebSite 0.10.0以及较早版本中的Announce模块，允许远程攻击者通过设置Image字段以引用其名称包含.gif.php扩展名的PHP文件来执行任意PHP代码。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.9.3.4,0.10.0,and avoid the version 0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1,0.9.3.2,0.9.3.3,0.9.3.4,0.10.0