Chmool Net version 2 suffers from direct unauthenticated administrative interface access and remote SQL injection vulnerabilities.