CVE-2009-4729: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, 3 id parameter to templates/header1.php, and 4 key...