ConPresso CMS versions 4.0.4a and prior suffer from multiple cross site scripting and SQL injection flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/50589/ConPresso-4.0.4a.txt
Source: https://packetstormsecurity.com/files/50589/ConPresso-4.0.4a.txt.html