CVE:CVE-2008-2632
CNNVD:CNNVD-200806-133
Joomla! acctexp(com_acctexp)组件0.12.x以及之前的版本存在SQL注入漏洞。远程攻击者可以借助subscribe操作中到index.php的usage参数，执行任意的SQL指令。
solution:Upgrade joomla com_acctexp to a higher version than 0.12,and avoid the version 0.12; Upgrade joomla joomla to a higher version than *