CVE:CVE-2008-0514
CNNVD:CNNVD-200801-458
Mambo和Joomla!的Glossary(com_glossary)2.0组件中的index.php中存在SQL注入漏洞。远程攻击者借助显示操作中的catid参数执行任意的SQL命令。
solution:Upgrade joomla glossary to a higher version than 2.0,and avoid the version 2.0; Upgrade mambo glossary to a higher version than 2.0,and avoid the version 2.0