CVE-2009-2310

The CVE-2009-2310 entry describes a SQL injection in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier. The vulnerability exists in include/get_read.php and is triggered via the section parameter, allowing remote attackers to execute arbitrary SQL commands. Available connected sources confirm th...