DerbyNet version 9.0 suffers from a cross site scripting vulnerability in racer-results.php. Continue reading...