CVE-2008-4711

The CVE-2008-4711 entry concerns a SQL injection vulnerability in Joovili 3.0 and earlier when magic_quotes_gpc is disabled. The issue allows remote attackers to inject arbitrary SQL commands through the id parameter to multiple pages (view.blog.php, view.event.php, view.group.php, view.music.php...