Koobi Pro

koobi_pro

Vendor: Dream4 • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1122 1Dream4 1Koobi Pro Apr 23, 2026 Mar 3, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koo...Show more SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.Show less
CVE-2006-3622 1Dream4 1Koobi Pro Apr 16, 2026 Jul 18, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether thi...Show more The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error.Show less
CVE-2006-3621 1Dream4 1Koobi Pro Apr 16, 2026 Jul 18, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter.
CVE-2006-3620 1Dream4 1Koobi Pro Apr 16, 2026 Jul 18, 2006 N/A· v4 N/A· v3 2.6 LOW· v2 Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter.