CVE:CVE-2009-0424
CNNVD:CNNVD-200902-106
AN Guestbook是开放源码的留言簿组件。                              
AN Guestbook (ANG) 0.7.7之前的版本中的sign1.php存在跨站脚本攻击漏洞。远程攻击者可以借助country参数，注入任意的web脚本或HTML。该参数未在(1)administrator/manage.php或(2)administrator/trash.php中得到正确处理。
solution:Upgrade an_guestbook an_guestbook to a higher version than 0.7.6,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4,0.4.1,0.4.5,0.5,0.6,0.7,0.7.1,0.7.5,1.0,1.1,1.2,1.5,2.0,2.1,2.2,2.2a,3.0,and avoid the version (,0.7.6],0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.4,0.4.1,0.4.5,0.5,0.6,0.7,0.7.1,0.7.5,1.0,1.1,1.2,1.5,2.0,2.1,2.2,2.2a,3.0