Security ECCMS 1.0 Cross Site Scripting / SQL Injection March 2, 2015 007admin ECCMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.