Vulnerabilities

TI-2008-05962 CVE-2008-6269 · GHSA-fcvh-jjcr-m6hg

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as…

LOW 38

Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id, session_logged_in, and session_username cookies for user priv…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02588 Published 2009-02-25 No fix listed CWE-287

TI-2008-04494 CVE-2008-4711 · GHSA-9wgv-6hm8-f2m3

SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is…

LOW 32

SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00909 Published 2008-10-23 No fix listed CWE-89

TI-2008-01983 CVE-2008-2063 · GHSA-wmhp-j9mm-wmjw

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers…

LOW 35

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-05-02 No fix listed CWE-89

TI-2008-00709 CVE-2008-0743 · GHSA-pxw5-2h3g-44r8

PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier…

MEDIUM 49

PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03425 Published 2008-02-13 No fix listed CWE-94

TI-2007-06317 CVE-2007-6621 · GHSA-63m7-v46r-x4v3

Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6…

LOW 33

Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02366 Published 2008-01-04 No fix listed CWE-22

TI-2007-06316 CVE-2007-6620 · GHSA-q33c-392v-vc7p

Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote…