PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier when register_globals is enabled allows remote attackers to include arbitrary files via the phpbb_root_path parameter.