CVE:CVE-2009-2390
CNNVD:CNNVD-200907-140
Joomla!BookFlip (com_bookflip) component 2.1 中的SQL注入漏洞会允许远程攻击者通过index.php提交book_id 参数执行任意SQL命令。
solution:Upgrade f-cimag-in com_bookflip to a higher version than 2.1,and avoid the version 2.1