CVE:CVE-2009-3491
CNNVD:CNNVD-200910-080
Joomla! Kinfusion SportFusion (com_sportfusion)组件0.2.2版本至0.2.3版本中存在SQL注入漏洞。远程攻击者借助对index.php的一个teamdetail操作的cid[0]参数，执行任意SQL指令。
solution:Upgrade kinfusion com_sportfusion to a higher version than 0.2.2,0.2.3,and avoid the version 0.2.2,0.2.3