eVuln ID: EV0118 - CzarNews v1.14 suffers from multiple XSS and SQL injection vulnerabilities if magic_quotes_gpc = off.