CVE:CVE-2009-2601
CNNVD:CNNVD-200907-373
Joomla! Joomlaequipment又称(JUser or com_juser) component 2.0.4中的SQL注入漏洞允许远程攻击者借助对index.php的show_profile操作中的ID参数执行任意的SQL指令。
solution:Upgrade joomlaequipment juser to a higher version than 2.0.4,and avoid the version 2.0.4
solution:Upgrade sun java_web_console to a higher version than 3.0.2,3.0.3,3.0.4,3.0.5,and avoid the version 3.0.2,3.0.3,3.0.4,3.0.5; Upgrade sun solaris to a higher version than 10,and avoid the version 10