Description
Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters.
References
- 20050427 SQL-injections in koobi-cms mailing-list
- 13413 vdb-entry
- koobi-parameter-search-sql-injection(20293) vdb-entry
- 13412 vdb-entry
- 15997 vdb-entry
- 14696 third-party-advisory