CVE:CVE-2009-2290
CNNVD:CNNVD-200907-023
Joomla! Boy Scout Advancement (com_bsadv) component 0.3及更早版本中存在SQL注入漏洞。允许远程攻击者通过index.php的(1)account (2)event task中的ID参数执行任意的SQL命令。
solution:Upgrade kim_eckert com_bsadv to a higher version than 0.3,0.0,0.1,0.2,and avoid the version (,0.3],0.0,0.1,0.2