CVE:CVE-2007-0374
CNNVD:CNNVD-200701-341
(1)Joomla! 1.0.11和1.5 Beta以及(2)Mambo 4.6.1中存在SQL注入漏洞。当取消内容编辑时，远程攻击者可以借助id参数，执行任意的SQL指令。
solution:Upgrade joomla joomla to a higher version than 1.0.11,1.5.0_beta,and avoid the version 1.0.11,1.5.0_beta; Upgrade mambo mambo to a higher version than 4.6.1,and avoid the version 4.6.1