4 matches found
CVE-2006-3621
CVE-2006-3621 concerns Koobi Pro CMS 5.6, specifically the showtopic module. The vulnerability is a SQL injection flaw in the toid parameter that enables remote attackers to execute arbitrary SQL commands. The associated CVSSv2 metrics indicate a base score of 7.5 (HIGH) with network access and l...
CVE-2006-3622
The CVE-2006-3622 issue affects Koobi Pro CMS 5.6 (showtopic module). A remote attacker could disclose information by abusing the p parameter containing a single quote, which leads to an error message that reveals the path. The underlying root cause is not clearly determined in the provided docum...
CVE-2006-3620
CVE-2006-3620 is an XSS vulnerability in the Koobi Pro CMS 5.6 showtopic module, exploitable via the toid parameter. The NVD entry specifies that remote attackers can inject arbitrary web script or HTML by supplying crafted input to toid, with an attack vector categorized as network, requiring no...
CVE-2008-1122
CVE-2008-1122 is a SQL injection vulnerability in Koobi Pro 5.7 (downloads module) that allows remote attackers to execute arbitrary SQL via the categ parameter to index.php. Connected sources confirm that Koobi CMS 4.2.4, 4.2.5, and 4.3.0 are affected as well; CVE-2008-1336 notes a related vulne...