CVE:CVE-2008-2892
CNNVD:CNNVD-200806-391
Joomla! EXP Shop (com_expshop) 组件 1.0 存在SQL注入漏洞，远程攻击者通过一个对index.php的show_payment参数来执行任意SQL命令。
solution:Upgrade feellove exp_shop_component to a higher version than 1.0,and avoid the version 1.0; Upgrade joomla com_expshop to a higher version than *