CVE:CVE-2007-1721
CNNVD:CNNVD-200703-638
C-Arbre 0.6PR7及之前版本中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到(1)Richtxt_functions.inc.php,(2)adddocfile.php,(3)auth_check.php,(4)browse_current_category.inc.php,(5)docfile_details.php,(6)main.php,(7)mainarticle.php,(8)maindocfile.php,(9)modify.php,(10)new.php,(11)resource_details.php,(12) smallsearch.php或(13)mwiki/LocalSettings.php的root_path参数中的一个URL，执行任意的PHP代码。
solution:Upgrade realink c-arbre to a higher version than 0.6_pr7,and avoid the version (,0.6_pr7]