CVE:CVE-2008-0773
CNNVD:CNNVD-200802-273
Mambo Phil Taylor Comments(com_comments，又称Review Script)组件存在SQL注入漏洞。远程攻击者可以借助id参数执行任意的SQL指令。
solution:Upgrade joomla com_comments to a higher version than 0.5.8.5g,and avoid the version (,0.5.8.5g]; Upgrade mambo com_comments to a higher version than 0.5.8.5g,and avoid the version (,0.5.8.5g]; Upgrade phil_taylor comments to a higher version than 0.5.8.5g,and avoid the version (,0.5.8.5g]; Upgrade phil_taylor review_script to a higher version than 0.5.8.5g,and avoid the version (,0.5.8.5g]