CVE-2008-1122
published 2008-03-03CVE-2008-1122: SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.00%
58.3th percentile
SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dream4 | koobi_pro | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
| koobi | koobi_cms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f6hp-vrm5-mh95: SQL injection vulnerability in Koobi CMS 4
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2008-1336 [HIGH] CWE-89 GHSA-f6hp-vrm5-mh95: SQL injection vulnerability in Koobi CMS 4
SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ parameter in a links action to index.php, a different vector than CVE-2008-1122.
GHSA
GHSA-q54j-8934-v8rh: SQL injection vulnerability in the downloads module in Koobi Pro 5
ghsa_unreviewed·2022-05-01
CVE-2008-1122 [HIGH] CWE-89 GHSA-q54j-8934-v8rh: SQL injection vulnerability in the downloads module in Koobi Pro 5
SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/archive/1/490886/100/0/threadedhttp://www.securityfocus.com/bid/28031https://exchange.xforce.ibmcloud.com/vulnerabilities/40903https://www.exploit-db.com/exploits/5198https://www.exploit-db.com/exploits/5447http://www.securityfocus.com/archive/1/490886/100/0/threadedhttp://www.securityfocus.com/bid/28031https://exchange.xforce.ibmcloud.com/vulnerabilities/40903https://www.exploit-db.com/exploits/5198https://www.exploit-db.com/exploits/5447
2008-03-03
Published