Dreamer CMS

CVEs (40)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-42279	Dreamer CMS Dreamer CMS	Cri	0.64	9.8	0.01	Sep 21, 2023	Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.
CVE-2021-43084	Dreamer CMS Dreamer CMS	Cri	0.64	9.8	0.01	Mar 24, 2022	An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.
CVE-2023-46886	Dreamer CMS Dreamer CMS	Cri	0.59	9.1	0.01	Nov 29, 2023	Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.
CVE-2023-50017	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Dec 14, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backup
CVE-2023-48914	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 30, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.
CVE-2023-48913	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 30, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.
CVE-2023-48912	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 30, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.
CVE-2023-48017	Moonsabc123 dreamer_cms	Hig	0.57	8.8	0.00	Nov 18, 2023	Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
CVE-2023-48021	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 14, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
CVE-2023-48020	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 14, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
CVE-2023-48060	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 13, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add
CVE-2023-48058	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Nov 13, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run
CVE-2023-45907	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.
CVE-2023-45906	iteachyou Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
CVE-2023-45905	Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
CVE-2023-45904	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
CVE-2023-45903	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
CVE-2023-45902	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
CVE-2023-45901	Dreamer CMS	Hig	0.57	8.8	0.00	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.
CVE-2023-43382	iteachyou Dreamer CMS	Hig	0.57	8.8	0.01	Sep 25, 2023	Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.

CVE-2023-42279CriSep 21, 2023
Dreamer CMS
Dreamer CMS
risk 0.64cvss 9.8epss 0.01
Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.
CVE-2021-43084CriMar 24, 2022
Dreamer CMS
Dreamer CMS
risk 0.64cvss 9.8epss 0.01
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.
CVE-2023-46886CriNov 29, 2023
Dreamer CMS
Dreamer CMS
risk 0.59cvss 9.1epss 0.01
Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.
CVE-2023-50017HigDec 14, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backup
CVE-2023-48914HigNov 30, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.
CVE-2023-48913HigNov 30, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.
CVE-2023-48912HigNov 30, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.
CVE-2023-48017HigNov 18, 2023
Moonsabc123
dreamer_cms
risk 0.57cvss 8.8epss 0.00
Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
CVE-2023-48021HigNov 14, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
CVE-2023-48020HigNov 14, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
CVE-2023-48060HigNov 13, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add
CVE-2023-48058HigNov 13, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run
CVE-2023-45907HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.
CVE-2023-45906HigOct 17, 2023
iteachyou
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
CVE-2023-45905HigOct 17, 2023
Dreamer
CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
CVE-2023-45904HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
CVE-2023-45903HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
CVE-2023-45902HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
CVE-2023-45901HigOct 17, 2023
Dreamer
CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.
CVE-2023-43382HigSep 25, 2023
iteachyou
Dreamer CMS
risk 0.57cvss 8.8epss 0.01
Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.

Page 1 of 2