CVE:CVE-2006-5816
CNNVD:CNNVD-200611-152
Dmitry Sheiko Business Card Web Builder (BCWB)存在多个PHP远程文件包含漏洞，远程攻击者可以通过传递给(1)/include/startup.inc.php，(2)dcontent/default.css.php或者(3)system/default.css.php的root_path_admin参数内的一个URL， 执行任意PHP代码。
solution:Upgrade dmitry_sheiko business_card_web_builder to a higher version than 2.5,and avoid the version 2.5