Bricolage 1.x SQL Injection / Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| alert0 2. http://localhost/admin/profile/source/ DEMO: http://demo.bricolagecms.org/admin/profile/source/ In 'Source Name' and 'description' field, POST DATA= "'--alert0 BSQL error pages on reflected XSS/malicious...