CVE-2008-1122
Koobi Pro 5.7 - SQL Injection via Downloads Module categ Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-1122. PoCs published by JosS, Cr@zy_King.
AI-analyzed exploit summary This exploit demonstrates multiple SQL injection vulnerabilities in Koobi CMS versions 4.3.0, 4.2.5, and 4.2.4. It provides specific URLs and payloads to extract admin credentials from the database.
Description
SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.
Exploits (2)
This exploit demonstrates multiple SQL injection vulnerabilities in Koobi CMS versions 4.3.0, 4.2.5, and 4.2.4. It provides specific URLs and payloads to extract admin credentials from the database.
This is a writeup describing a SQL injection vulnerability in Koobi Pro 5.7. It provides the vulnerable parameter and a sample SQL injection payload but does not include executable exploit code.