CVE:CVE-2006-0542
CNNVD:CNNVD-200602-055
NukedWeb GuestBookHost 2005.04.25的config.php中存在多个SQL注入漏洞。远程攻击者可以借助(1) 电子邮件和(2) password参数执行任意SQL命令。
solution:Upgrade nukedweb guestbookhost to a higher version than 2005-04-25,and avoid the version 2005-04-25