CVE:CVE-2008-0846
CNNVD:CNNVD-200802-369
Joomla!的com_profile组件的index.PHP存在SQL注入漏洞。远程攻击者可以通过oid参数来执行任意SQL命令。
solution:Upgrade joomla com_profile to a higher version than *; Upgrade mambo com_profile to a higher version than *