Fireshot

A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `id` parameter in the articleCall.php file.

The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the `identifyYourself` cookie.

A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `user` parameter in the login.php file.