CVE-2008-1122 in Koobi Pro

Riassunto

di MITRE

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 03/03/2008
• Divulgazione: 03/03/2008
• Moderazione: accettato
• Voce: VDB-41305
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.00997
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-1122
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-1122
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-1122/