The vulnerability exists due to failure in the 'adm/admin_edit.php' script to properly verify the source of HTTP request. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data. The vulnerability exists due to failure in the 'add_story.php', 'editprofile.php', 'adm/content_add.php', 'adm/admin_edit.php' scripts to properly sanitize user-supplied input in 'story_url', 'email', 'title', 'username' variables. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.