GBook for Php-Nuke version 1.0 fails to sanity check user input allowing for script injection and cookie theft.