CVE:CVE-2009-3971
CNNVD:CNNVD-200911-197
Joomla! jTips (com_jtips) component 1.0.7版本和1.0.9版本中存在SQL注入漏洞。远程攻击者可以借助一个对index.php待ladder操作中的season参数，执行任意SQL指令。
solution:Upgrade jtips com_jtips to a higher version than 1.0.7,1.0.9,and avoid the version 1.0.7,1.0.9