CVE:CVE-2009-4231
CNNVD:CNNVD-200912-102
SweetRice是一款普通的WEB站点管理软件。SweetRice 0.5.3及其早期版本中的as/lib/plugins.php存在目录游历漏洞，远程攻击者可以借助plugin参数中的".."包含并执行任意本地文件。
solution:Upgrade basic-cms sweetrice to a higher version than 0.5.3,0.2.0,0.2.1,0.3.0,0.4.0,0.4.1,0.4.2,0.4.4,0.5.2,and avoid the version (,0.5.3],0.2.0,0.2.1,0.3.0,0.4.0,0.4.1,0.4.2,0.4.4,0.5.2