CVE:CVE-2006-5287
CNNVD:CNNVD-200610-204
Xeobook 0.93的sign.php中存在多个SQL注入漏洞，远程攻击者可以通过(1)User-Agent HTTP报头或者(2)gb_entry_text，(3)gb_location，(4)gb_fullname或(5)gb_sex参数来执行任意SQL命令。
solution:Upgrade xeobook xeobook to a higher version than 0.93,and avoid the version 0.93