e107 0.7.25 Cross Site Scripting / SQL Injection

e107 version 0.7.25 suffers from cross site scripting and remote SQL injection vulnerabilities.

Source: e107 0.7.25 Cross Site Scripting / SQL Injection