Dounia Creation version 1.4 suffers from remote SQL injection and weak default password vulnerabilities. Continue reading...