Vendor/product archive

dream4 / koobi_cms CVEs

Beta · best-effort

4 CVEs tagged to dream4 / koobi_cms — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dream4 vendor archive

CVE-2008-4778

Published Oct 29, 2008

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-1373

Published May 3, 2005

Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-0890

Published May 2, 2005

SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2005-0889

Published Mar 24, 2005

Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1