CVE-2010-4916

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

Date published : 2011-10-08

http://www.securityfocus.com/bid/43035

http://www.exploit-db.com/exploits/14935