CVE-2009-2224: An Guestbook

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter.

Affected products

• An Guestbook An Guestbook: version 0.7.8 only

Published 2009-06-26. Last modified 2026-06-16.