episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.
mitre·CWE-425·Published 2005-05-20