Librelogic · Rumba Xml · CVE-2009-4403
**Name of the Vulnerable Software and Affected Versions**
Rumba XML version 1.8
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the PATH INFO in index.php.
**Recommendations**
For Rumba XML version 1.8, update the index.php file to properly sanitize the PATH INFO input to prevent arbitrary web script or HTML injection. As a temporary workaround, consider restricting access to the index.php file until a patch is available.