Additionally, an authenticated admin clicking a crafted link like:
http://target.com/admin/delete_entry.php?id=1 OR 1=1 would delete all entries. The patch introduces multiple security layers. 4.1 Input Sanitization (XSS Fix) File: post_entry.php & view_guestbook.php Sr - Denied Guestbook V2.1.7 Fix
After applying Sr-Denied Guestbook V2.1.7, the following tests were performed: Additionally, an authenticated admin clicking a crafted link