PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote malicious users to execute arbitrary PHP code via the lang parameter.
source: wwwsecurityfocuscom/bid/14155/info
MyGuestbook is prone to a remote file include vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input
An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server ...
Vulmon