Dokeos 2.2 RC2 (index.php, language param) - SQL Injection

No description provided by source. 验证链接： http://host/index.php?language=0%27%20UNION%20SELECT%201,2,3,4,version %28%29,6,7,8%20--%202...

CVE-2013-6341

SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...