CVE-2009-3539

The exploit demonstrates a reflected XSS vulnerability in Ultra Classifieds Pro by injecting a malicious script via the 'sn' parameter in the URL. The payload bypasses basic sanitization using URL encoding and line breaks.

The exploit demonstrates a reflected XSS vulnerability in Ultra Classifieds Pro by injecting a script tag into the 'cname' parameter of the subclass.php endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.