Skip to content
Noroxi

dream4 records

11 published records for vendor dream4.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    11 records
    • CVE-2005-1373
      30Monitor

      Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via t

      HighCVSS 7.5No exploitEPSS 1%

      dream4 · koobi cmsMay 3, 2005

    • CVE-2008-2036
      30Monitor

      SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id

      HighCVSS 7.5Proof of conceptEPSS 1%

      dream4 · koobiApr 30, 2008

    • CVE-2005-0890
      30Monitor

      SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.

      HighCVSS 7.5Proof of conceptEPSS 1%

      dream4 · koobi cmsMay 2, 2005

    • CVE-2006-3621
      30Monitor

      SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the t

      HighCVSS 7.5Proof of conceptEPSS 1%

      dream4 · koobi proJul 18, 2006

    • CVE-2008-4778
      30Monitor

      SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid

      HighCVSS 7.5Proof of conceptEPSS 1%

      dream4 · koobi cmsOct 29, 2008

    • CVE-2008-1122
      30Monitor

      SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ

      HighCVSS 7.5Proof of conceptEPSS 0%

      dream4 · koobi proMar 3, 2008

    • CVE-2008-6210
      30Monitor

      SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_i

      HighCVSS 7.5Proof of conceptEPSS 0%

      dream4 · koobiFeb 19, 2009

    • CVE-2006-3622
      20Monitor

      The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter,

      MediumCVSS 5.0No exploitEPSS 1%

      dream4 · koobi proJul 18, 2006

    • CVE-2005-4588
      17Monitor

      Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url

      MediumCVSS 4.3Proof of conceptEPSS 1%

      dream4 · koobiDec 30, 2005

    • CVE-2005-0889
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or H

      MediumCVSS 4.3Proof of conceptEPSS 1%

      dream4 · koobi cmsMar 24, 2005

    • CVE-2006-3620
      10Monitor

      Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script

      LowCVSS 2.6No exploitEPSS 1%

      dream4 · koobi proJul 18, 2006