CVE:CVE-2008-0800
CNNVD:CNNVD-200802-318
Joomla!的McQuiz (com_mcquiz) Final 组件的index.PHP存在SQL注入漏洞。远程攻击者可以通过一个user_tst_shw操作中的tid参数来执行任意SQL命令。
solution:Upgrade joomla com_mcquiz to a higher version than 0.9,and avoid the version 0.9