CVE-2006-3900
Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Date published : 2006-07-27
http://www.securityfocus.com/bid/19159
http://www.securityfocus.com/archive/1/441192/100/0/threaded