CVE:CVE-2010-2019
CNNVD:CNNVD-201005-332
Lokomedia CMS的downlot.php存在SQL注入漏洞，当magic_quotes_gpc被禁用时，远程攻击者可以通过file参数执行任意SQL命令。
solution:Upgrade bukulokomedia lokomedia_cms to a higher version than 1.4.1,and avoid the version 1.4.1