CVE-2008-4711

SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php.

Link	Resource
http://www.securityfocus.com/bid/31444	Exploit
http://securityreason.com/securityalert/4486
https://exchange.xforce.ibmcloud.com/vulnerabilities/45486
https://www.exploit-db.com/exploits/6595

Configuration 1

cpe:2.3:a:joovili:joovili:2.1:*:*:*:*:*:*:* cpe:2.3:a:joovili:joovili:*:*:*:*:*:*:*:* cpe:2.3:a:joovili:joovili:3.0.6:*:*:*:*:*:*:*

---

Published : 2008-10-23 05:17

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4711

Mitre link : CVE-2008-4711

No products.

CWE-89