NavBoard version 16 suffers from multiple local file inclusion and cross site scripting vulnerabilities.