PT-2005-1918 · Dream4 · Dream4 Koobi Cms

Published 2005-03-26 · Updated 2008-09-05 · CVE-2005-0890

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dream4 Koobi CMS version 4.2.3

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the area parameter.

Recommendations For Dream4 Koobi CMS version 4.2.3, avoid using the area parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0890

Affected Products

Dream4 Koobi Cms

References · 8

• 🔥 http://securitytracker.com/id?1013558 · Exploit
• 🔥 https://exploit-db.com/exploits/25555 · Exploit
• 🔥 https://exploit-db.com/exploits/25273 · Exploit
• 🔥 https://exploit-db.com/exploits/25556 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0890 · Security Note
• http://secunia.com/advisories/14696 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0890 · Note
• http://securityfocus.com/bid/12896 · Note