CVE:CVE-2005-3588
CNNVD:CNNVD-200511-155
Advanced Guestbook是一款基于PHP的留言系统。
Advanced Guestbook 2.2的admin.php中的SQL注入漏洞，可让远程攻击者通过用户名字段执行任意SQL命令并获得特权。
solution:Upgrade advanced_guestbook advanced_guestbook to a higher version than 2.2,and avoid the version 2.2