CVE:CVE-2008-6773
CNNVD:CNNVD-200904-535
YourPlace 1.0.2及之前版本中的user/internettoolbar/edit.php存在静态代码注入漏洞。远程认证用户可以借助(1)fav1_url,(2)fav1_name,(3) fav2_url,(4)fav2_name,(5)fav3_url,(6)fav3_name,(7)fav4_url,(8)fav4_name,(9)fav5_url或(10)fav5_name参数，注入任意的PHP代码到user/internettoolbar/index.php。
solution:Upgrade peterselie yourplace to a higher version than 1.0.2,1.0,1.0.1,and avoid the version (,1.0.2],1.0,1.0.1