Dream4

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 11
    Known Exploited: 0
    0
    Critical Level Threats
    7
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2008-6210

    SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_id parameter in the gallerypic page.

    Last Modified: Apr 23, 2026
    Published: Feb 20, 2009

    CVE-2008-4778

    SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.

    Last Modified: Apr 23, 2026
    Published: Oct 29, 2008

    CVE-2008-2036

    SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter in a poll action.

    Last Modified: Apr 23, 2026
    Published: Apr 30, 2008

    CVE-2008-1122

    SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0.

    Last Modified: Apr 23, 2026
    Published: Mar 03, 2008

    CVE-2006-3620

    Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter.

    Last Modified: Apr 16, 2026
    Published: Jul 14, 2006
    Items Per Page
    Dream4 Vulnerabilities & Security CVEs | CVE-DB