CVE:CVE-2004-2195
CNNVD:CNNVD-200412-1056
Zanfi CMS lite 1.1中的index.php存在PHP远程文件包含漏洞。远程攻击者可以借助inc参数执行任意PHP代码。
solution:Upgrade zanfi_solutions zanfi_cms_lite to a higher version than 1.1,and avoid the version 1.1