CVE:CVE-2009-3493
CNNVD:CNNVD-200910-082
Zenas PaoBacheca Guestbook 2.1版本中存在多个跨站脚本攻击漏洞。远程攻击者借助对(1)scrivi.php和(2)index.php的PATH_INFO ，注入任意web脚本或HTML。
solution:Upgrade zenas paobacheca_guestbook to a higher version than 2.1,and avoid the version 2.1