CVE:CVE-2007-2933
CNNVD:CNNVD-200705-528
Joomla! Phil-a-Form (com_philaform)组件的index.php中存在SQL注入漏洞。远程攻击者可以借助form_id参数，执行任意的SQL指令。
solution:Upgrade phil-a-form phil-a-form to a higher version than 1.2.0.0,and avoid the version 1.2.0.0