CVE:CVE-2006-2158
CNNVD:CNNVD-200605-050
Jetbox是一款使用php和mysql的内容管理系统
jetbox/includes/phpdig/includes/config.php文件未经声明便使用了include()函数中的relative_script_path变量，允许攻击者包含远程资源的文件，执行任意代码。
漏洞代码：
if (is_file("$relative_script_path/locales/$phpdig_language-language.php"))
    {include "$relative_script_path/locales/$phpdig_language-language.php";}
else
    {include "$relative_script_path/locales/en-language.php";}
solution:Upgrade stadtaus guestbook_script to a higher version than 1.7,and avoid the version (,1.7]