high7.5Public exploit code
CVE-2010-2438
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- G.CMS Generator - SQL Injection2010-06-21 · webapps · php · Verified
Impact
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Laubrotel | G.Cms Generator | All versions |