https://www.securityfocus.com/bid/89360
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200509-068

aMemberPro是一款基于PHP的会员和订阅管理系统。aMemberPro2.3.4版本中多个PHP远程文件包含漏洞允许远程攻击者通过配置[root_dir]参数执行任意PHP代码到以下文件：(1)mysql.inc.php，(2)efsnet.inc.php，(3)theinternetcommerce.inc.php，(4)cdg.inc.php，(5)compuworld.inc.php，(6)directone.inc.php，(7)authorize_aim.inc.php，(8)beanstream.inc.php，(9)config.inc.php，(10)eprocessingnetwork.inc.php，(11)eway.inc.php，(12)linkpoint.inc.php，(13)logiccommerce.inc.php，(14)netbilling.inc.php，(15)payflow_pro.inc.php，(16)paymentsgateway.inc.php，(17)payos.inc.php，(18)payready.inc.php，或(19)plugnplay.inc.php。

Amember Amember 2.3.4 Pro

来源:XF
名称:amember-file-include(22157)
链接:http://xforce.iss.net/xforce/xfdb/22157
来源:BUGTRAQ
名称:20050905[NewAngelsAdvisory]aMemberPro2.3.X-RemoteFileInclude
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=112605375926801&w;=2