CVE:CVE-2006-4065
CNNVD:CNNVD-200608-141
Dmitry Sheiko SAPID Gallery 1.0及早期版本存在多个PHP远程文件包含漏洞，远程攻击者可借助：(1)提交到(a) usr/extensions/get_calendar.inc.php脚本中的root_path参数，或(2)提交到(b) usr/extensions/get_tree.inc.php脚本的GLOBALS[root_path]参数，来执行任意PHP代码。
solution:Upgrade dmitry_sheiko sapid_gallery to a higher version than 1.0,and avoid the version (,1.0]