Belsec Team has discovered some vulnerabilities in Sava's Guestbook, which can be exploited by malicious people to conduct script insertion and SQL injection attacks.

1) Input passed to the "name", "country", "email", "website", and "message" parameters in add2.php is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Success exploitation requires that "magic_quotes_gpc" is disabled.

2) Input passed to the "name", "country", "email", and "website" parameters in add2.php is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is then executed in a user's browser session in context of an affected site when the malicious data is displayed.

The vulnerabilities are confirmed in a version downloaded on 2007-03-06.

Solution
Edit the source code to ensure that input is properly sanitised.
Further details available to Secunia VIM customers

Provided and/or discovered by
Belsec Team

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://belsec.com/advisories/142/summary.html

Deep Links
Links available to Secunia VIM customers