Description Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator. References http://bbs.gxlcms.com/forum.php?mod=viewthread&tid=787&extra=page%3D1 http://www.ttk7.cn/post-77.html