Banana Dance Wiki CMS b2.x LFI / SQL Injection

Banana Dance Wiki CMS version b2.x suffers from local file inclusion and remote SQL injection vulnerabilities.