https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6269.htmlhttps://patchthecve.com/cve/CVE-2008-6269.htmlTue, 16 Jun 2026 23:01:55 +0000HIGH 7.5: Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id, session_logged_in, and session_username cookies for user privileges; (2) session_admin_id, session_admin_username, and session_admin cookies https://patchthecve.com/cve/CVE-2008-4711.htmlhttps://patchthecve.com/cve/CVE-2008-4711.htmlTue, 16 Jun 2026 22:58:22 +0000MEDIUM 6.8: SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php.https://patchthecve.com/cve/CVE-2008-2063.htmlhttps://patchthecve.com/cve/CVE-2008-2063.htmlTue, 16 Jun 2026 22:53:01 +0000HIGH 7.5: SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter.