Security Advisory
CVE-2010-4857
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.