CVE:CVE-2007-5185
CNNVD:CNNVD-200710-045
phpWCMS XT 0.0.7 BETA版本及其早期版本存在多个PHP远程文件包含漏洞，远程攻击者可以借助phpwcms_template/inc_script/frontend_render/navigation/中的(1) config_HTML_MENU.php和(2) config_PHPLM.php的HTML_MENU_DirPath参数的一个URL执行任意PHP代码。
solution:Upgrade phpwcms-xt phpwcms-xt to a higher version than 0.0.7_beta,and avoid the version (,0.0.7_beta]