WebSPELL versions 4.01.02 and below suffer from a remote file disclosure vulnerability in picture.php.
617d3817383b6e72461da94d8082660975700916cece3de25326815b78f2ae16
WebSPELL versions 4.01.01 and below suffer from a direct database backup download vulnerability.
a8475b0aa1a3ddb9e555dd6ceac71b82e265daf554c9b434a7e36ca8203704f7