CVE:CVE-2009-2395
CNNVD:CNNVD-200907-144
K2 (com_k2) component 1.0.1 Beta for Joomla! 及其早期版本的SQL注入漏洞，允许远程攻击者经由一个itemlist操作中的类型参数到达index.php执行任意SQL命令。
solution:Upgrade joomlaworks com_k2 to a higher version than *:beta,and avoid the version *:beta