Etomite CMS versions 0.6.1.2 and below suffer from SQL injection and local file inclusion vulnerabilities.