CVE:CVE-2007-5821
CNNVD:CNNVD-200711-061
DM Guestbook中存在多个目录遍历漏洞，远程攻击者借助(1)对(a) guestbook.php,(b) admin/admin.guestbook.php,或(c)auto/glob_new.php的lng参数; 或 (2)对auto/ch_lng.php的lngdefault参数包含和执行任意本地文件。
solution:Upgrade dm_guestbook dm_guestbook to a higher version than 0.4.1,and avoid the version (,0.4.1]