Thailand Union Library Management version 6.2 suffers from cross site scripting and remote SQL injection vulnerabilities.