Koobi Pro CMS 5.6 SQL injection & XSS

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Koobi Pro CMS 5.6 SQL injection & XSS
From: vampire_chiristof@xxxxxxxxx
Date: 15 Aug 2006 10:54:28 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

vendor:http://www.dream4.de

dork:"powered by Koobi Pro 5.6"

vuln : 

http://[host]/index.php?p=showtopic&toid=[SQL]

http://[host]/index.php?p=showtopic&toid=[XSS]

Path Disclosure:http://[host]/index.php?area=1&p='

Author : Vampire

vampire_chiristof@xxxxxxxxx

Homepage : Www.HackerZ.iR

Www.H4ckerZ.Com

Iran HackerZ Security Team

Prev by Date: [security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS)
Next by Date: Re: Concurrency-related vulnerabilities in browsers - expect problems
Previous by thread: [security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS)
Next by thread: Lizge V.20 Web Portal File Include Vulnerability
Index(es):
- Date
- Thread