CVE-2010-4857

CVE-2010-4857 affects CAG CMS 0.2 Beta; the weakness is a SQL injection in click.php triggered via the itemid parameter. The vulnerability allows remote attackers to send crafted input to execute arbitrary SQL commands against the underlying database. The issue is documented across multiple sourc...