diff --git a/application/utils.inc.php b/application/utils.inc.php
index 2f4f4e551..7f6eebae5 100644
--- a/application/utils.inc.php
+++ b/application/utils.inc.php
@@ -62,11 +62,11 @@ class utils
 	{
 		if (!file_exists($sParamFile))
 		{
-			throw new Exception("Could not find the parameter file: '$sParamFile'");
+			throw new Exception("Could not find the parameter file: '".utils::HtmlEntities($sParamFile)."'");
 		}
 		if (!is_readable($sParamFile))
 		{
-			throw new Exception("Could not load parameter file: '$sParamFile'");
+			throw new Exception("Could not load parameter file: '".utils::HtmlEntities($sParamFile)."'");
 		}
 		$sParams = file_get_contents($sParamFile);
 
diff --git a/synchro/synchro_exec.php b/synchro/synchro_exec.php
index 28e0af9e5..9638a40f8 100644
--- a/synchro/synchro_exec.php
+++ b/synchro/synchro_exec.php
@@ -135,7 +135,7 @@ foreach(explode(',', $sDataSourcesList) as $iSDS)
 	$oSynchroDataSource = MetaModel::GetObject('SynchroDataSource', $iSDS, false);
 	if ($oSynchroDataSource == null)
 	{
-		$oP->p("ERROR: The data source (id=$iSDS) does not exist. Exiting...");
+		$oP->p("ERROR: The data source (id=".utils::HtmlEntities($iSDS).") does not exist. Exiting...");
 		$oP->output();
 		exit -3;
 	}