CVE-2009-3359

CVE-2009-3359 describes multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php. The trusted sources indicate an XS...