ref: BUGTRAQ:20060528 VARIOMAT(advanced cms tool)SQL injection/XSS page 4 or 5 of google finally yielded this tidbit... http://sourceforge.net/project/shownotes.php?release_id=303940 http://sourceforge.net/project/showfiles.php?group_id=85684&release_id=303940 http://www.camelot.co.pt/story/48/371849