Ucenter Project version 2.0 uses an insecure crossdomain.xml set up.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89062/ucenter-crossdomain.txt
Source: https://packetstormsecurity.com/files/89062/Ucenter-Project-2.0-Crossdomain.xml.html