CVE:CVE-2006-0852
CNNVD:CNNVD-200602-344
Admbook 1.2.2及之前版本的write.php中存在直接静态代码注入漏洞。远程攻击者可以借助插入在content-data.php中的X-Forwarded-For HTTP报头字段执行任意PHP代码。
solution:Upgrade devscripts admbook to a higher version than 1.2.2,and avoid the version (,1.2.2]