CVE-2008-1122

Koobi Pro <5.7 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.

Exploits (2)

exploitdb WRITEUP VERIFIED
by Cr@zy_King · textwebappsphp
https://www.exploit-db.com/exploits/5198
exploitdb WORKING POC VERIFIED
by JosS · textwebappsphp
https://www.exploit-db.com/exploits/5447

Scores

EPSS 0.0049
EPSS Percentile 65.0%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

dream4/koobi_pro

Timeline

Published Mar 03, 2008
Tracked Since Feb 18, 2026