CVE:CVE-2009-2310
CNNVD:CNNVD-200907-048
Extensible-BioLawCom CMS (X-BLC) 0.2.0以及更早版本下的include/get_read.php中的SQL注入漏洞允许远程攻击者借助section参数执行任意的SQL命令。
solution:Upgrade bow_der_kleine x-blc to a higher version than 0.2.0,0.1.4,and avoid the version (,0.2.0],0.1.4