azucarcms version 1.3 suffers from remote file inclusion, local file inclusion, and cross site scripting vulnerabilities.