This host is running AN Guestbook and is prone to Local File Inclusion vulnerability.

Successful exploitation will allow attacker to include and execute arbitrary files from local and external resources, and can gain sensitive information about remote system directories when register_globals is enabled. Impact level: Application/System

Upgrade to AN Guestbook version 1.2.1 or later, For updates refer to http://aguestbook.sourceforge.net/

The flaw is due to error in 'g_lang' parameter in 'ang/shared/flags.php' which is not properly verified before being used to include files.

AN Guestbook version 0.7 to 0.7.8

• http://en.securitylab.ru/nvd/381881.php
• http://www.attrition.org/pipermail/vim/2009-June/002196.html

---

Updated on 2017-03-28