CVE:CVE-2008-0721
CNNVD:CNNVD-200802-159
Mambo的Sermon (com_sermon)组件的index.php存在SQL注入漏洞。远程攻击者可以通过Gid参数来执行任意SQL命令。
solution:Upgrade mambo com_sermon to a higher version than 0.2,and avoid the version 0.2