CVE-2010-2438 Information

Description

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI probably index.php.

Reference

http://www.exploit-db.com/exploits/13954 https://exchange.xforce.ibmcloud.com/vulnerabilities/59621