Secunia Security Advisory – Sylvain Thual has reported two vulnerabilities in 1Two News, which can be exploited by malicious people to conduct script insertion attacks and bypass certain security restrictions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37632/sa15344.txt
Source: https://packetstormsecurity.com/files/37632/Secunia-Security-Advisory-15344.html