CVE:CVE-2009-3189
CNNVD:CNNVD-200909-291
DigiOz Guestbook 1.7.2版本的search.php中存在跨站脚本攻击漏洞。远程攻击者可以借助search_term参数，注入任意网络web脚本或HTML。
solution:Upgrade digioz digioz_guestbook to a higher version than 1.7.2,and avoid the version 1.7.2