CVE:CVE-2009-4447
CNNVD:CNNVD-200912-384
Jax Guestbook使远程攻击者可以借助对admin/guestbook.admin.php的一个直接请求绕过验证并修改管理员设置。
solution:Upgrade jax_scripts jax_guestbook to a higher version than 3.5.0,and avoid the version 3.5.0