CVE:CVE-2009-2239
CNNVD:CNNVD-200906-436
Joomla!的(1)casinobase(com_casinobase),(2)casino_blackjack(com_casino_blackjack),和(3)casino_videopoker(com_casino_videopoker)组件0.3.1中存在SQL注入漏洞。远程攻击者可以借助对index.php的Itemid参数，执行任意SQL指令。
solution:Upgrade joomla com_casiino_blackjack to a higher version than 0.3.1,and avoid the version 0.3.1; Upgrade joomla com_casino_videopoker to a higher version than 0.3.1,and avoid the version 0.3.1; Upgrade joomla com_casinobase to a higher version than 0.3.1,and avoid the version 0.3.1