Dynamic Guestbook 3.0 allows remote malicious users to execute arbitrary code via shell metacharacters in the gbdaten parameter.
gcf dynamic guestbook 3.0