Kmita FAQ v1.0 suffers from XSS and SQL injection.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47196/KmitaFAQv1.0.txt
Source: https://packetstormsecurity.com/files/47196/KmitaFAQv1.0.txt.html