Description
Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter.
References
- realtime-rates-xss(51853) vdb-entry
- 56081 vdb-entry
- 35936 third-party-advisory
- http://packetstormsecurity.org/0907-exploits/rtce-xss.txt