CVE:CVE-2008-1642
CNNVD:CNNVD-200804-038
Sava's GuestBook 2.0中的index.php存在目录遍历漏洞。远程攻击者借助action参数中的目录遍历序列，放入和运行任意的本地文件。
solution:Upgrade savas_place savas_guestbook to a higher version than 2.0,and avoid the version 2.0