CVE-2009-2310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...