CVE

Id
34828  
CVE No.
CVE-2008-4711  
Status
Candidate  
Description
SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php.  
Phase
Assigned (20081023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381423 34828 CVE-2008-4711 MILW0RM:6595  View
381424 34828 CVE-2008-4711 URL:http://www.milw0rm.com/exploits/6595  View
381425 34828 CVE-2008-4711 BID:31444  View
381426 34828 CVE-2008-4711 URL:http://www.securityfocus.com/bid/31444  View
381427 34828 CVE-2008-4711 SREASON:4486  View
381428 34828 CVE-2008-4711 URL:http://securityreason.com/securityalert/4486  View
381429 34828 CVE-2008-4711 XF:joovili-id-sql-injection(45486)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49669 JVNDB-2008-004979 Joomla! 用の Jpad コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用の Jpad (com_jpad) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-4715 34828 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004979.html  View