eTouch Samepage 4.4.0.0.239 SQL Injection / File Read

eTouch Samepage version 4.4.0.0.239 suffers from remote SQL injection and arbitrary file read vulnerabilities.