CVE:CVE-2007-2104
CNNVD:CNNVD-200704-344
iXon CMS存在多个目录遍历漏洞。远程攻击者可以借助提交到(1)index.php,(2)page.php,(3)search.php,(4)single.php和(5)archives.php.的theme_url参数中的..， 包含和运行任意的本地文件。
solution:Upgrade ixon_cms ixon_cms to a higher version than 0.30,and avoid the version 0.30