PHPback versions prior to 1.3.1 suffer from cross site scripting and remote SQL injection vulnerabilities. Continue reading...