Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : Advisory: http://zone14.free.fr/advisories/5/ --Raphael HUCK