SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.Referenceshttp://www.securityfocus.com/bid/12896http://securitytracker.com/id?1013558http://secunia.com/advisories/14696
