CVE-2008-6210

CVE-2008-6210 describes an SQL injection in the Dream4 Koobi application (versions 4.4 and 5.4). The vulnerability is triggered in index.php via the gallerypic page’s img_id parameter, allowing remote attackers to potentially execute arbitrary SQL commands. The available documents identify the af...

CVE-2008-2036

CVE-2008-2036 is a SQL injection vulnerability in dream4 Koobi Pro 6.25, affecting index.php via the poll_id parameter in a poll action. The root cause is unvalidated input leading to arbitrary SQL execution by remote attackers. Exploitation details or in-the-wild status are not provided in the c...

CVE-2005-4588

The CVE-2005-4588 entry describes a Cross-site scripting (XSS) vulnerability in Koobi 5. The issue arises when parsing nested, malformed URL BBCode tags, enabling remote attackers to inject arbitrary web script or HTML into the affected application. The sources indicate the vulnerability is in Ko...