CVE:CVE-2007-0202
CNNVD:CNNVD-200701-142
lex Guestbook 4.0.2及之前版本的index.php中存在SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助lang参数，执行任意的SQL指令。
solution:Upgrade alexphpteam alex_guestbook to a higher version than 3.12,3.13,4.0.1,4.0.2,and avoid the version 3.12,3.13,4.0.1,4.0.2