Vendor

Moonsabc123

Products

CVEs

Across products

Status

Private

Products

dreamer_cms
10 CVEs

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-48017	Moonsabc123 dreamer_cms	Hig	0.57	8.8	Nov 18, 2023	Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
CVE-2023-48021	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Nov 14, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
CVE-2023-48020	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Nov 14, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
CVE-2023-45907	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.
CVE-2023-45906	Moonsabc123 dreamer_cms	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
CVE-2023-45905	Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
CVE-2023-45904	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
CVE-2023-45903	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
CVE-2023-45902	Dreamer CMS Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
CVE-2023-45901	Dreamer CMS	Hig	0.57	8.8	Oct 17, 2023	Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.

CVE-2023-48017HigNov 18, 2023
Moonsabc123
dreamer_cms
risk 0.57cvss 8.8epss 0.00
Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
CVE-2023-48021HigNov 14, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
CVE-2023-48020HigNov 14, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
CVE-2023-45907HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.
CVE-2023-45906HigOct 17, 2023
Moonsabc123
dreamer_cms
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
CVE-2023-45905HigOct 17, 2023
Dreamer
CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
CVE-2023-45904HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
CVE-2023-45903HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
CVE-2023-45902HigOct 17, 2023
Dreamer CMS
Dreamer CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
CVE-2023-45901HigOct 17, 2023
Dreamer
CMS
risk 0.57cvss 8.8epss 0.00
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.