CVE:CVE-2010-0403
CNNVD:CNNVD-201005-245
phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。
phpGroupWare(phpgw)的about.php存在目录遍历漏洞，远程攻击者可以通过app参数的".."符包含并执行任意本地文件。
solution:Upgrade phpgroupware phpgroupware to a higher version than 0.9.16.015,0.9.16,0.9.16.000,0.9.16.001,0.9.16.002,0.9.16.003,0.9.16.005,0.9.16.010,0.9.16.011,0.9.16.012,0.9.16.014,and avoid the version (,0.9.16.015],0.9.16,0.9.16.000,0.9.16.001,0.9.16.002,0.9.16.003,0.9.16.005,0.9.16.010,0.9.16.011,0.9.16.012,0.9.16.014