CVE:CVE-2006-7018
CNNVD:CNNVD-200702-276
phpwcms 存在代码执行漏洞。由于没有正确的过滤脚本phpwcms_code_snippets/mail_file_form.php和sample_ext_php/mail_file_form.php的 nome_evento 参数的值，远程攻击者可以借助此漏洞，执行任意的代码。
solution:Upgrade oliver_georgi phpwcms to a higher version than 1.1_rc3,1.2.5_dev,and avoid the version (,1.1_rc3],(,1.2.5_dev]