CVE:CVE-2008-0518
CNNVD:CNNVD-200801-462
Mambo和Joomla!的Recipes(com_recipes)1.00组件中的index.php中尚未SQL注入漏洞允许远程攻击者借助detail action中的ID参数执行任意的SQL命令。
solution:Upgrade joomla com_recipes to a higher version than 1.00,and avoid the version 1.00; Upgrade mambo com_recipes to a higher version than 1.00,and avoid the version 1.00