PostNuke 0.726 Phoenix is susceptible to multiple path disclosure and cross site scripting vulnerabilities.