CVE:CVE-2008-0652
CNNVD:CNNVD-200802-119
Mambo和Joomla!的Downloads (com_downloads) 组件会允许远程攻击者通过一个选择文件夹(selectfolder)操作中的filecatid参数来执行任意SQL命令。
solution:Upgrade joomla com_downloads to a higher version than *; Upgrade mambo com_downloads to a higher version than *