CVE:CVE-2008-0606
CNNVD:CNNVD-200802-073
Mambo和Joomla!的hambo2 (com_shambo2)组件中的index.php中的SQL注入漏洞允许远程攻击者借助itemid参数执行任意的SQL命令。
solution:Upgrade joomla com_shambo2 to a higher version than *; Upgrade mambo com_shambo2 to a higher version than *; Upgrade phil_taylor shambo2 to a higher version than *