w3bcms versions 3.5.0 and below insecure cookie handling and multiple SQL injection vulnerabilities exploit.