CVE-2009-1790
Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Date published : 2009-05-26
http://www.securityfocus.com/bid/34999
http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247