Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML via the rollid parameter.Referenceshttp://marc.info/?l=bugtraq&m=112680539610442&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/22274http://secunia.com/advisories/16826/http://www.securityfocus.com/bid/14835http://www.irannetjob.com/index.php?option=com_content&task=view&id=122&Itemid=28