Vulnerabilities

TI-2008-05903 CVE-2008-6210 · GHSA-gqxx-2wpc-f9jr

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote…

LOW 35

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_id parameter in the gallerypic page.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00975 Published 2009-02-20 No fix listed CWE-89

TI-2008-01957 CVE-2008-2036 · GHSA-jgm8-pcpc-9694

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers…

LOW 35

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter in a poll action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01189 Published 2008-04-30 No fix listed CWE-89

TI-2005-04319 CVE-2005-4588 · GHSA-mw4v-qjph-c794

Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01385 Published 2005-12-30 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote…

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers…

Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject…