CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...