CVEvulnerability
CVE-2008-4711
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php.
Affected configurations
• joovili joovili (<= 3.0)
• joovili joovili 2.1
• joovili joovili 3.0.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://securityreason.com/securityalert/4486 securityreason.com
- http://www.securityfocus.com/bid/31444 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45486 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6595 www.exploit-db.com
- http://securityreason.com/securityalert/4486 securityreason.com
- http://www.securityfocus.com/bid/31444 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45486 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6595 www.exploit-db.com