2018-10-18 21:00:00
mitre
PUBLISHED
In libadminactiondataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.