newsfactory Cross Site Scripting & SQL injection

[CrAzY.CrAcKeR () hotmail com]

=================================== 
Discovery By: CrAzY CrAcKeR 
Site: www.alshmokh.com 
I want to thank my friend:- 
nono225-mHOn-rageh-LoverHacker-BoNy_m 
Breeeeh-Rootshil-LiNuX_rOOt-SauDiVirUS 
=================================== 

Example:- 
/vorstellung.php?id=[sql]
/vorstellung.php?id=[xss]

=================================== 
Email: CrAzY.CrAcKeR(at)hotmail(dot)com