CVE:CVE-2007-0609
CNNVD:CNNVD-200705-167
Advanced Guestbook 中存在目录遍历漏洞。远程攻击者可以借助一个超长的cookie中的..，绕过.htaccess设置，运行任意的PHP本地文件或读取本地模板。该cookie被没有.php扩展名的文件名所跟随。
solution:Upgrade advanced_guestbook advanced_guestbook to a higher version than 2.4.2,and avoid the version 2.4.2