XSS http://www.ram-consulting.org/registrazione_analisi2.asp SQL Injection http://www.ram-consulting.org/admin/index.php (admin access) http://www.ram-consulting.org/news_singola.asp http://www.ram-consulting.org/news_singola_print.asp http://www.ram-consulting.org/vai_news.asp Data tampering and manipulation is possible on the cookies.