CVE:CVE-2008-2454
CNNVD:CNNVD-200805-334
Joomla! xsstream-dm (com_xsstream-dm)组件0.01测试第二版存在SQL注入漏洞。远程攻击者可以借助到index.php的movie参数，执行任意的SQL指令。
solution:Upgrade joomla com_xsstream-dm to a higher version than 0.01_beta,and avoid the version 0.01_beta