CVE:CVE-2010-4857
CNNVD:CNNVD-201110-039
CAG CMS 0.2 Beta版本中的click.php中存在SQL注入漏洞。远程攻击者可借助itemid参数执行任意SQL命令。
solution:Upgrade curtiss_grymala cag_cms to a higher version than 0.2:beta,and avoid the version 0.2:beta