CVE:CVE-2008-0918
CNNVD:CNNVD-200802-435
Joomla!的astatsPRO (com_astatspro)组件的includes/count_dl_or_link.inc.php中存在SQL注入漏洞。远程攻击者通过getfile.php的id参数执行任意SQL命令。该漏洞不同于CVE-2008-0839。注意:该漏洞的来源未知，漏洞细节来自其他第三方。
solution:Upgrade astats astatspro to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade joomla com_astatspro to a higher version than 1.0.1,and avoid the version 1.0.1