CVE:CVE-2006-5308
CNNVD:CNNVD-200610-255
Open Conference Systems (OCS)中存在多个PHP远程文件包含漏洞，远程攻击者可以通过(1)include/theme.inc.php或(2)include/footer.inc.php的fullpath参数中的URL执行任意PHP代码。
solution:Upgrade open_conference_systems open_conference_systems to a higher version than 1.1.5,and avoid the version (,1.1.5]