CVE-2013-4789: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php...

CVE-2006-1923: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 RSS/RSS.php and 2 possibly other vectors...