Apache Continuum version 1.4.2 suffers from command injection and cross site scripting vulnerabilities. Continue reading...