MBLS Flex CMS version 0.7.2 suffers from remote SQL injection and cross site scripting vulnerabilities. Continue reading...