CVE-2007-1304: Undefined Security Weakness

Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 country, 3 email, 4 website, and 5 message parameters...