CVE:CVE-2007-0382
CNNVD:CNNVD-200701-336
Joomla! Letterman 1.2.3(com_letterman)组件1.0.12之前版本的letterman.class.php中存在多个SQL注入漏洞。远程攻击者可以借助id参数，执行任意的SQL指令。这些漏洞与(1)lm_sendMail,(2)saveNewsletter和(3)cancelNewsletter函数有关。
solution:Upgrade letterman letterman to a higher version than 1.2.3,and avoid the version 1.2.3