CVE-2009-2785

CVE-2009-2785 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the PHP Open Classifieds Script. The documented vectors are (1) the page parameter to buy.php and (2) the id parameter to contact.php and tellafriend.php, enabling remote attackers to inject arbitrary web scri...