CVE:CVE-2009-3540
CNNVD:CNNVD-200910-128
YourFreeWorld Ultra Classifieds Pro的listads.php中存在跨站脚本攻击漏洞。远程攻击者可以借助cn参数，注入任意的web脚本或HTML。
solution:Upgrade yourfreeworld ultra_classifieds_pro to a higher version than *