Sql injection

2008-10-2317:17:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.1%

JSON

SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php.

CPENameOperatorVersion
joovilieq2.1
joovilile3.0
joovilieq3.0.6

Name	Operator	Version
joovili	eq	2.1
joovili	le	3.0
joovili	eq	3.0.6

References

securityreason.com/securityalert/4486

www.securityfocus.com/bid/31444

exchange.xforce.ibmcloud.com/vulnerabilities/45486

www.exploit-db.com/exploits/6595