CVE-2006-3622

MEDIUM 5.0CVE-2006-3622 · Published 18/07/2006 · updated 16/06/2026

In short

CVE-2006-3622 is a MEDIUM (CVSS 5.0) vulnerability affecting koobi pro (dream4).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
koobi pro dream4	`= 5.6`	No fix yet

Description

The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error.

References

securitytracker.com/id · Exploit
securityfocus.com/archive/1/443294/100/100/threaded

More vulnerabilities in koobi pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free