CVE:CVE-2007-1304
CNNVD:CNNVD-200703-216
Sava's Guestbook 23.11.2006版本的add2.php中存在多个SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助(1)姓名、(2)国家、(3)电子邮件、(4)网站和(5)信息参数，执行任意的SQL指令。
solution:Upgrade savas_place savas_guestbook to a higher version than 2006-11-23,and avoid the version 2006-11-23