CVE-2009-2224

Name of the Vulnerable Software and Affected Versions AN Guestbook version 0.7.8

Description A directory traversal issue exists due to the g lang parameter in ang/shared/flags.php, allowing remote attackers to read arbitrary files when register globals is enabled. This is achieved by using a .. (dot dot) in the g lang parameter.

Recommendations For AN Guestbook version 0.7.8, consider disabling the register globals setting to mitigate the risk of exploitation. Additionally, restrict access to the ang/shared/flags.php file to minimize the risk of arbitrary file reading. Avoid using the g lang parameter in the affected endpoint until the issue is resolved.