vendor site: http://www.rhadrix.com/ 
risk : low 

xss /index.php?rns=

full path ( array )
/index.php?rns[]/index.php?pag[]
benjamin moss=E9 & laurent gaffi=E9
http://s-a-p.ca/