Navarino Infinity versions prior to 2.2 suffer from session fixation and remote blind SQL injection vulnerabilities. Continue reading...