Known Vulnerabilities in Blog-in-Blog 1.0.4