EIP-2026-114428

The exploit describes a PHP code injection vulnerability in xGB guestbook software due to insufficient input validation. An attacker can inject PHP code into form fields, leading to arbitrary command execution and deletion of the datafile.