PT-2006-4496 · Koobi · Koobi Pro Cms

Published 2006-07-14 · Updated 2018-10-18 · CVE-2006-3622

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Koobi Pro CMS version 5.6

Description The issue allows remote attackers to obtain sensitive information by exploiting the showtopic module. This is achieved by including a single quote in the p parameter, which results in the path being displayed in an error message. The nature of this issue, whether it is related to SQL injection or forced SQL error, is not clearly defined.

Recommendations For Koobi Pro CMS version 5.6, as a temporary workaround, consider restricting access to the showtopic module until a patch is available. Avoid using the p parameter in the affected module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-3622

Affected Products

Koobi Pro Cms

References · 3

• 🔥 http://securitytracker.com/id?1016485 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3622 · Security Note
• http://securityfocus.com/archive/1/443294/100/100/threaded · Note