Ma$Ter-0F-De$A$T0R

**Name of the Vulnerable Software and Affected Versions** Guestbook Script version 1.9 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `script root` parameter to various PHP files, including 'delete.php', 'edit.php', 'inc/common.inc.php', 'database.php', 'entries.php', 'index.php', 'logout.php', and 'settings.php' in the 'admin/' directory. **Recommendations** For Guestbook Script version 1.9, consider restricting access to the `script root` parameter in the affected PHP files to minimize the risk of exploitation. As a temporary workaround, restrict access to the vulnerable PHP files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.