Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such as a URL that contains a single quote (') in the start parameter of index.php.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22825
http://securityreason.com/securityalert/96