Show filters
35 Total Results
Displaying 31-35 of 35
Sort by:
Attacker Value
Unknown
CVE-2023-1746
Disclosure Date: March 30, 2023 (last updated October 08, 2023)
A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-224634 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2023-27084
Disclosure Date: March 16, 2023 (last updated October 08, 2023)
Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.
0
Attacker Value
Unknown
CVE-2023-0513
Disclosure Date: January 26, 2023 (last updated October 08, 2023)
A vulnerability has been found in isoftforce Dreamer CMS up to 4.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3 is able to address this issue. It is recommended to upgrade the affected component. VDB-219334 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2022-42245
Disclosure Date: November 17, 2022 (last updated December 22, 2024)
Dreamer CMS 4.0.01 is vulnerable to SQL Injection.
0
Attacker Value
Unknown
CVE-2021-43084
Disclosure Date: March 24, 2022 (last updated February 23, 2025)
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.
0
