CVE:CVE-2008-0653
CNNVD:CNNVD-200802-120
Joomla!的Ynews (com_ynews) 1.0.0组件的+U7中的SQL注入漏洞会允许远程攻击者通过一个showYNews操作中的id参数来执行任意SQL命令。
solution:Upgrade joomla com_ynews to a higher version than 1.0.0,and avoid the version 1.0.0