Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Joovili 'picture' Parameter Multiple Local File Include Vulnerabilities

Joovili is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit these issues to execute arbitrary local scripts and retrieve potentially sensitive information.

These versions are affected:

Joovili 3.0.6 (and prior)
Joovili 2.x (and prior)







 

Privacy Statement
Copyright 2009, SecurityFocus