Published: 02/05/2005 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote malicious users to execute arbitrary SQL commands via the area parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dream4 koobi cms 4.2.3

source: wwwsecurityfocuscom/bid/12896/info Koobi CMS is reportedly affected by a SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query Successful exploitation could result in a compromise of the application, disclosure or modification of da ...

source: wwwsecurityfocuscom/bid/13412/info Koobi CMS is prone to an SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may pe ...

source: wwwsecurityfocuscom/bid/13413/info Koobi CMS is prone to an SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may pe ...

NVD-CWE-Other http://securitytracker.com/id?1013558 http://www.securityfocus.com/bid/12896 http://secunia.com/advisories/14696 https://nvd.nist.gov https://www.exploit-db.com/exploits/25273/

CVE-2005-0890

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect