CVE-2007-6463
Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."
Date published : 2007-12-19
http://phprealestatescript.com/PHPREC-121707-646PM-PATCH.zip