====================
Discovered by: Qex 
Date: 25 April 2006 
====================

/member.php?action=viewpro&member=[XSS]

/portfolio.php?cat_id=[XSS]
/portfolio_photo_popup.php?id=[XSS]