Security NDBLOG 0.1 Cross Site Scripting / SQL Injection September 27, 2014 007admin NDBLOG version 0.1 suffers from cross site scripting and remote SQL injection vulnerabilities.