Vendor/product archive

dream4 / koobi CVEs

Beta · best-effort

3 CVEs tagged to dream4 / koobi — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dream4 vendor archive

CVE-2008-6210

Published Feb 20, 2009

SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_id parameter in the gallerypic page.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-2036

Published Apr 30, 2008

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter in a poll action.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-4588

Published Dec 30, 2005

Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1