Xxy961216

The issue is related to an XSS vulnerability in the uploadify.swf file, specifically through the `uploadifyID` or `movieName` parameter.

The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the `callback` parameter in the "public/api.php" endpoint, specifically in an `uploadpic` action.

A Blind SQL Injection issue exists via the `order` parameter in an "index.php?act=index" request.

A security issue exists in the software due to a Cross-Site Scripting (XSS) flaw. The vulnerability is exploited via the `id` parameter in the `assets/weengine/components/zclip/ZeroClipboard.swf` endpoint. This issue arises from the non-standard use of a flash component.