My Little Forum version 2.3.3 suffers from cross site scripting and remote SQL injection vulnerabilities.