CVE:CVE-2008-0686
CNNVD:CNNVD-200802-187
Joomla! NeoReferences (com_neoreferences)组件的index.php存在SQL注入漏洞。远程攻击者借助catid参数执行任意的SQL指令。
solution:Upgrade joomla com_neoreferences to a higher version than 1.3.1,1.3.3,and avoid the version 1.3.1,1.3.3; Upgrade mambo com_neoreferences to a higher version than 1.3.1,1.3.3,and avoid the version 1.3.1,1.3.3