Multiple Vulnerabilities in CompactCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CompactCMS which could be exploited to perform cross-site scripting and SQL injection attacks.

1) Cross-site scripting (XSS) vulnerabilities in CompactCMS
1.1 The vulnerability exists due to input sanitation error in the "a" parameter in index.php within the "Comments" module. A remote attacker can send a specially crafted HTTP request to the vulnerable script and execute arbitrary HTML and script code in user`s browser in context of the vulnerable website.
Exploitation example:
http://host/index.php?a="><script>alert("XSS");</script>
1.2 The vulnerability exists due to input sanitation error in the "userName" parameter in lib/includes/auth.inc.php. A remote attacker can send a specially crafted HTTP POST request to the vulnerable script and execute arbitrary HTML and script code in user`s browser in context of the vulnerable website.
Exploitation example:
<form action="http://host/lib/includes/auth.inc.php" method="post" name="main" >
<input type="hidden" name="userName" value="123&#34;><script>alert(&#34;XSS&#34;);</script>" />
<input type="hidden" name="userPass" value="123" />
<input type="submit" value="Submit" name="submit" />
</form>

2) SQL injection vulnerability in CompactCMS
The vulnerability exists due to input sanitation errors in the "id" parameter in news.html within the "News" module. A remote attacker can send a specially crafted HTTP request to the vulnerable script and execute arbitrary SQL commands in application`s database. Successful exploitation may allow an attacker to read, modify, add or delete arbitrary data in the database.
Exploitation example:
http://host/news.html?id=123%20union%20select%201,1,3,@@version,5,6,7,8,9,10 ,11,12,13,14,15,16 ,17,18,19%23