CVE-2006-3622

The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' single quote in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error...

CVE-2006-3620

Cross-site scripting XSS vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter...

CVE-2006-3620

Cross-site scripting XSS vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter...

CVE-2006-3622

The CVE-2006-3622 issue affects Koobi Pro CMS 5.6 (showtopic module). A remote attacker could disclose information by abusing the p parameter containing a single quote, which leads to an error message that reveals the path. The underlying root cause is not clearly determined in the provided docum...

CVE-2006-3620

CVE-2006-3620 is an XSS vulnerability in the Koobi Pro CMS 5.6 showtopic module, exploitable via the toid parameter. The NVD entry specifies that remote attackers can inject arbitrary web script or HTML by supplying crafted input to toid, with an attack vector categorized as network, requiring no...

CVE-2006-3622

The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' single quote in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error...

CVE-2006-3621

CVE-2006-3621 concerns Koobi Pro CMS 5.6, specifically the showtopic module. The vulnerability is a SQL injection flaw in the toid parameter that enables remote attackers to execute arbitrary SQL commands. The associated CVSSv2 metrics indicate a base score of 7.5 (HIGH) with network access and l...

CVE-2006-3621

SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter...

Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection

source: https://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the...

Dream4 Koobi Pro 5.6 - showtopic SQL Injection

Dream4 Koobi Pro 5.6 - showtopic SQL Injection source: https://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities coul...

Koobi Pro 5.6 showtopic Module toid Parameter XSS

Koobi Pro 5.6 showtopic Module toid Parameter XSS. CVE-2006-3620. Webapps exploit for php platform source: http://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input....

Trustix Secure Linux Security Advisory 2005.23

Multiple Vulnerabilities in brainsquad-team's CMS ================================================= Discovered on 23.12.2005 by yorn. Merry Christmas! Description: ------------ www.brainsquad-team.de The CMS from brainsquad-team is a php / sql based CMS system. Problems: -------- XSS: There are...

CVE-2005-4588

Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4588

The CVE-2005-4588 entry describes a Cross-site scripting (XSS) vulnerability in Koobi 5. The issue arises when parsing nested, malformed URL BBCode tags, enabling remote attackers to inject arbitrary web script or HTML into the affected application. The sources indicate the vulnerability is in Ko...

CVE-2005-4588

Cross-site scripting XSS vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Dream4 Koobi 5.0 - BBCode URL Tag Script Injection

Dream4 Koobi 5.0 - BBCode URL Tag Script Injection source: https://www.securityfocus.com/bid/16078/info Koobi is prone to a script injection vulnerability. An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HTML and script...

Dream4 Koobi 5.0 - BBCode URL Tag Script Injection

source: https://www.securityfocus.com/bid/16078/info Koobi is prone to a script injection vulnerability. An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HTML and script code would be able to access properties of the site...

koobi-cms423.txt

SQL-injections in koobi-cms 4.2.3 The program: koobi-cms Homepage: http://www.dream4.de/ Vulnerable Versions: 4.2.3 Has found: CENSORED SVT 28.04.05 The description --------------- Vulnerability has been found in parameter page. In koobi-cms it Refers to - p. Data transferred to this parameter no...

Dream4 Koobi CMS index.php area Parameter SQL Injection

The remote host is running the Dream4 Koobi CMS, a CMS written in PHP. The remote version of this software contains an input validation flaw leading to a SQL injection vulnerability. An attacker may exploit this flaw to execute arbitrary SQL commands against the remote database. %NASLMINLEVEL 703...

CVE-2005-1373

Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 q or 2 p parameters...