Lazarus Guestbook versions 1.6 and below suffer from cross site scripting flaws.
737cc64ab8a5884e74d15fce2f58e8d64b236689a7de31c82a0c91afa767d538
OpenGuestbook version 0.5 is susceptible to cross site scripting and SQL injection flaws.
2b065c9e0bddbe8487358e0a491f3ed4ca8a65459d9c3c6c969db4f9b80362f0
MediaSlash is susceptible to a remote file inclusion flaw that allows for code execution.
5bc5f7a0848b199773a7d1bda1a9834a4256b04d24b8e074f6ee767cf56e39a7