Douran Portal suffers from a cross site scripting vulnerability in Slider.ashx. Note that this finding houses site-specific data.