CVE:CVE-2008-2676
CNNVD:CNNVD-200806-176
Joomla! iJoomla News Portal(com_news_portal)组件1.0以及之前的版本存在SQL注入漏洞。远程攻击者可以借助到index.php的itemid参数，执行任意的SQL指令。
solution:Upgrade joomla com_news_portal to a higher version than 1.0,and avoid the version (,1.0]; Upgrade joomla joomla to a higher version than *