CVE:CVE-2006-7133
CNNVD:CNNVD-200703-171
PHP上传工具1.0的upload/bin/download.php中存在目录遍历漏洞。远程攻击者可以借助文件名参数中的".."序列或绝对路径名，读取任意文件。
solution:Upgrade php_upload_tool php_upload_tool to a higher version than 1.0,and avoid the version 1.0