CVE:CVE-2009-0829
CNNVD:CNNVD-200903-106
QuoteBook中存在多个SQL注入漏洞。远程攻击者可以借助(1)MyBox和(2)对(a)quotes.php的selectFavorites参数和(3)QuoteName以及(4)对(b)quotesadd.php的QuoteText参数，执行任意SQL指令。
solution:Upgrade andrew_freed quotebook to a higher version than -