CVE:CVE-2006-5651
CNNVD:CNNVD-200611-125
DigiOz Guestbook中的list.php存在信息泄露漏洞。远程攻击者通过非数字的page参数(在出错消息中显示安装路径)来获取敏感信息。
solution:Upgrade digioz digioz_guestbook to a higher version than 1.7,and avoid the version 1.7