Leap CMS Multiple remote vulnerabilities

Summary
The remote Leap CMS is affected to multiple remote vulnerabilities. Leap is a single file, template independant, PHP and MySQL Content Management System.
Solution
for the sql injection vulnerability, set your php configuration to magic_quotes_gpc = off, for other vulnerabilities, it's recommanded to download the latest stable version