Revize(r) CMS is susceptible to SQL injection and cross site scripting attacks. Exploitation details provided.