Dream4: >> Koobi Pro >> 5.6 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter.
CVSS Score
2.6
EPSS Score
0.003
Published
2006-07-18
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter.
CVSS Score
7.5
EPSS Score
0.003
Published
2006-07-18
The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error.
CVSS Score
5.0
EPSS Score
0.003
Published
2006-07-18