Secunia Security Advisory – b2evolution versions 0.8.2 and prior have been found vulnerable to cross site scripting and SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31606/secunia-b2evolution.txt
Source: https://packetstormsecurity.com/files/31606/secunia-b2evolution.txt.html