Download Manager version 1.1 suffers from backup disclosure and remote SQL injection vulnerabilities.