CVE-2009-4460

CVE-2009-4460 describes cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the rid parameter to index.php, faq.php, and register.php. The provided documents do not specify affected versi...