CVE-2009-0424: Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote atta...

Security readout for executives and security teams

CVE-2009-0424 is an older cross-site scripting issue in AN Guestbook before 0.7.7. An attacker could place script or HTML through the guestbook country field, which could later affect administrator pages. Business urgency depends on whether this legacy guestbook is still internet-facing or accessible to staff. Exposure is most likely on legacy websites still running AN Guestbook or ANG before 0.7.7, especially where sign1.php accepts public submissions and administrators review guestbook entries through the affected admin pages. Prioritize remediation if the guestbook remains public-facing or administrators still use it. If AN Guestbook is retired, verify removal. The main business risk is administrator compromise through malicious content submitted by an external user. Mitigation focus: Upgrade AN Guestbook to 0.7.7 or later where available.; Check vendor release notes and advisories for the official fix guidance.; Remove or disable the guestbook if it is no longer business-critical..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.