eSyndiCat Portal System has an xss bug in search.php=0D
can be exploited from web interface=0D
=0D
http://www.example.com/[path]/search.php?what=[xss]&search_top.x=0&search_top.y=0&search_top=GO=0D 
=0D
--------------------=0D
Discovered by meto5757=0D
Rootshell Security Group