EUVD-2008-2060

Malware in sbrugna...

EUVD-2007-6585

Malware in sbrugna...

EUVD-2008-0753

Malware in sbrugna...

EUVD-2007-6586

Malware in sbrugna...

EUVD-2008-4691

Malware in sbrugna...

Joovili <= 3.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class: SQL...

Joovili 2.1 'members_help.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27693/info Joovili is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...

Joovili <= 3.0.6 (joovili.images.php) Remote File Disclosure Vulnerability

No description provided by source. found by EcHoLL version: 2. include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE version 3...

Joovili 3.1.8 Setup Basic Site Settings Vulnerability

Exploit for php platform in category web applications ===================================================== Joovili 3.1.8 Setup Basic Site Settings Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability

Exploit for php platform in category web applications ================================================================== Joovili 3.1.8 CRLF injection/HTTP response splitting Vulnerability ==================================================================...

Joovili 3.1.8 SQL injection Vulnerability

Exploit for php platform in category web applications ========================================= Joovili 3.1.8 SQL injection Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Authentication flaw

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the 1 sessionid, sessionloggedin, and sessionusername cookies for user privileges; 2 sessionadminid, sessionadminusername, and sessionadmin cookies for admin...

CVE-2008-6269

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the 1 sessionid, sessionloggedin, and sessionusername cookies for user privileges; 2 sessionadminid, sessionadminusername, and sessionadmin cookies for admin...

CVE-2008-6269

CVE-2008-6269 affects Joovili 3.1.4. The vulnerability allows remote attackers to bypass authentication and gain privileges as other users (including administrator) by manipulating cookies: (1) session_id, session_logged_in, session_username for user privileges; (2) session_admin_id, session_admi...

CVE-2008-6269

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the 1 sessionid, sessionloggedin, and sessionusername cookies for user privileges; 2 sessionadminid, sessionadminusername, and sessionadmin cookies for admin...

joovili-insecure.txt

Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4 ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

Joovili 3.1.4 Insecure Cookie Handling Vulnerability

No description provided by source. Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4 ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...

Joovili 3.1.4 - Insecure Cookie Handling

Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4 ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

Joovili 3.1.4 - Insecure Cookie Handling

Joovili 3.1.4 - Insecure Cookie Handling Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4 ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMIN...

Joovili 3.1.4 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================== Joovili 3.1.4 Insecure Cookie Handling Vulnerability ==================================================== Joovili Script Insecure Cookie Handling Vulnerability version: 3.1.4...