TorrentTrader Classic 1.08 - Cross-Site Scripting via account-inbox.php msg Parameter
Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.