Good BAD Vote

DATE	CVE	VULNERABILITY TITLE	RISK
2010-03-10	CVE-2009-4683	Path Traversal vulnerability in Scriptsez Good/Bad Vote Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. network low complexity scriptsez CWE-22	7.5
2010-03-10	CVE-2009-4682	Cross-Site Scripting vulnerability in Scriptsez Good/Bad Vote Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action. network scriptsez CWE-79	4.3