CVE:CVE-2009-3332
CNNVD:CNNVD-200909-441
Joomla! JBudgetsMagic(com_jbudgetsmagic)组件0.3.2到0.4.0版本中存在SQL注入漏洞。远程攻击者可以借助mybudget操作中提交到index.php的bid参数，执行任意的SQL指令。
solution:Upgrade sopinet com_jbudgetsmagic to a higher version than 0.3.2,0.4.0,0.4.0:beta,and avoid the version 0.3.2,0.4.0,0.4.0:beta