CVE:CVE-2006-4579
CNNVD:CNNVD-200612-645
The Address Book 1.04e的users.php存在目录遍历漏洞，远程攻击者可以借助在language参数（该参数中包含..）来包含任意文件。
solution:Upgrade the_address_book the_address_book to a higher version than 1.04e,and avoid the version 1.04e