CVE:CVE-2008-0670
CNNVD:CNNVD-200802-172
Joomla!的Noticias (com_noticias)组件的index.php中存在的SQL注入漏洞会允许远程攻击者通过一个detalhe操作中的id参数以执行任意SQL命令。
solution:Upgrade joomla com_noticias to a higher version than 1.0,and avoid the version 1.0