2021-08-12 14:49:18
mitre
PUBLISHED
In libadminactiondataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.