CVE:CVE-2006-6279
CNNVD:CNNVD-200612-043
@lex Guestbook中的index.php存在多个输入验证漏洞。远程攻击者通过一个引用不存在皮肤的皮肤参数导致系统在出错消息内泄露安装路径来获得敏感信息。
solution:Upgrade alexphpteam alex_guestbook to a higher version than 4.0.1,and avoid the version 4.0.1