CVE:CVE-2008-0799
CNNVD:CNNVD-200802-317
Mambo和 Joomla!的 Quiz (com_quiz)组件的index.PHP存在SQL注入漏洞。远程攻击者可以通过一个user_tst_shw操作中的tid参数来执行任意SQL命令。
solution:Upgrade joomla com_quiz to a higher version than 0.81,and avoid the version (,0.81]; Upgrade mambo com_quiz to a higher version than 0.81,and avoid the version (,0.81]