CVE:CVE-2005-0679
CNNVD:CNNVD-200505-275
Tell A Friend Script 2.7的tell_a_friend.inc.php存在PHP远程文件包含漏洞，远程攻击者可以通过修改script_root参数来引用含有该代码的远程Web服务器的URL来执行任意PHP代码。
solution:Upgrade stadtaus tell_a_friend_script to a higher version than 2.7,and avoid the version (,2.7]