CVE:CVE-2008-7302
CNNVD:CNNVD-201110-031
Joomla!是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。
Joomla!的nBill (com_netinvoice)组件1.2.0 SP1的netinvoice.php中存在SQL注入漏洞。远程攻击者可借助“knowledge of ... the contents of an encrypted file.”涉及的未明向量执行任意SQL命令。
solution:Upgrade netshinesoftware com_netinvoice to a higher version than 1.2.0:sp1,and avoid the version 1.2.0:sp1