CVE:CVE-2006-3937
CNNVD:CNNVD-200607-508
x_atrix xGuestBook 1.02中的post.php可以使远程攻击者借助可在出错信息中显示安装路径的，不包含(1) user, (2) mail, (3) p,或(4) url 参数的请求，获得敏感信息。
solution:Upgrade xguestbook xguestbook to a higher version than 1.02,and avoid the version 1.02