CVE:CVE-2008-0849
CNNVD:CNNVD-200802-373
Mambo和Joomla!Downloads (com_downloads)组件的index.PHP存在SQL注入漏洞。远程攻击者能通过一个selectcat 函数中的cat参数来注入任意的SQL命令。该问题不同于CVE-2008-0652。
solution:Upgrade joomla com_downloads to a higher version than *; Upgrade mambo com_downloads to a higher version than *