CVE:CVE-2006-2573
CNNVD:CNNVD-200605-467
DGBook 1.0中的index.php 存在SQL注入漏洞。在禁用magic_quotes_gpc的状态下，远程攻击者可以借助 (1) name, (2) email, (3) homepage, (4) address, (5) comment和(6) ip参数，执行任意SQL指令。
solution:Upgrade dian_gemilang dgbook to a higher version than 1.0,and avoid the version 1.0