Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) email parameter to add.php or (2) banurl parameter.Referenceshttp://archives.neohapsis.com/archives/bugtraq/2002-10/0148.htmlhttp://www.securityfocus.com/bid/5945http://www.iss.net/security_center/static/10336.php