TinX CMS version 1.1 suffers from multiple local file inclusion and cross site scripting vulnerabilities.