$ 0 0 Aardvark Topsites PHP suffers from cross site scripting / html injection and information disclosure vulnerabilities.