A vulnerability in Whatpulse.Org profiles allows cross site scripting and session hijacking.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38535/whatpulse.txt
Source: https://packetstormsecurity.com/files/38535/whatpulse.txt.html