CVE:CVE-2009-2337
CNNVD:CNNVD-200907-089
当magic_quotes_gpc无效时，W3b cms Gaestebuch Guestbook Module 3.0.0下的includes/module/book/index.inc.php存在SQL注入漏洞，允许远程攻击者借助spam_id参数执行任意的SQL命令。
solution:Upgrade w3bcms gaestebuch_guestbook_module to a higher version than 3.0.0,and avoid the version 3.0.0