Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) q or (2) p parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Koobi_cms | Dream4 | 4.2.3 (including) | 4.2.3 (including) |