cpe:/a:dream4:koobi:6.25:pro CVE-2008-2036 2008-04-30T12:17:00.000-04:00 2017-09-28T21:30:59.473-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2008-05-01T21:38:00.000-04:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20080415 Koobi Pro 6.25 poll Remote SQL Injection Vulnerability BID 28779 SECUNIA 29789 SREASON 3843 EXPLOIT-DB 5448 VUPEN ADV-2008-1242 XF koobipro-pollid-sql-injection(41817) SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter in a poll action.