Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.
http://www.securityfocus.com/bid/4423
http://www.iss.net/security_center/static/8762.php
http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html