CVE:CVE-2008-5874
CNNVD:CNNVD-200901-079
Joomla!是一款开放源码的内容管理系统(CMS)。
Joomla! Hotel Booking Reservation System(又称HBS)中存在多个SQL注入漏洞。远程攻击者可以借助对
(1)com_allhotels
或
(2)com_5starhotels
模块中的index.php的显示酒店详情操作中的id参数，执行任意的SQL指令。
solution:Upgrade joomlahbs com_5starhotels to a higher version than _nil_,and avoid the version _nil_; Upgrade joomlahbs com_allhotels to a higher version than _nil_,and avoid the version _nil_; Upgrade joomlahbs hotel_booking_reservation_system to a higher version than _nil_,and avoid the version _nil_