Sample Blog Site version 1.0 suffers from cross site scripting and remote file inclusion vulnerabilities.