Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter.
- http://packetstormsecurity.org/1004-exploits/scratcher-sqlxss.txt
No PoCs found on GitHub currently.