Koobi Pro CMS 5.6 SQL injection & XSS

vendor:http://www.dream4.de

dork:"powered by Koobi Pro 5.6"

vuln :

http://[host]/index.php?p=showtopic&toid=[SQL]

http://[host]/index.php?p=showtopic&toid=[XSS]

Path Disclosure:http://[host]/index.php?area=1&p='

Author : Vampire

[email protected]

Homepage : Www.HackerZ.iR

Www.H4ckerZ.Com

Iran HackerZ Security Team