CVE:CVE-2008-5875
CNNVD:CNNVD-200901-080
Joomla!是一款开放源码的内容管理系统(CMS)。
Joomla! Hotel Booking Reservation System(又称HBS)中的com_lowcosthotels组件存在SQL注入漏洞。远程攻击者可以借助对index.php的显示酒店详情操作中的id参数，执行任意的SQL指令。
solution:Upgrade joomlahbs com_lowcosthotels to a higher version than _nil_,and avoid the version _nil_; Upgrade joomlahbs hotel_booking_reservation_system to a higher version than _nil_,and avoid the version _nil_