CVE:CVE-2008-1459
CNNVD:CNNVD-200803-368
Mambo and Joomla! Alberghi (com_alberghi) 2.1.3和之前版本的组件存在SQL注入漏洞。远程攻击者借助对index.php的detail操作中的id参数，执行任意的SQL指令。
solution:Upgrade joomlaitalia com_alberghi to a higher version than 2.1.3,and avoid the version 2.1.3; Upgrade mamboitalia com_alberghi to a higher version than 2.1.3,and avoid the version 2.1.3