Security Corporation Security Advisory [SCSA-008]: PY-Livredor, an easy to use guestboot script using PHP4 and MySQL, has a Cross-Site Scripting vulnerability which allows attackers to inject script codes into the guestbook and use them on clients browser as if they were provided by the website.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/30869/SCSA008.txt
Source: https://packetstormsecurity.com/files/30869/SCSA008.txt.html