Page 3 of 23 results (0.003 seconds)

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-0513 – isoftforce Dreamer CMS cross site scripting

https://notcve.org/view.php?id=CVE-2023-0513

26 Jan 2023 — A vulnerability has been found in isoftforce Dreamer CMS up to 4.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://gitee.com/isoftforce/dreamer_cms/issues/I68UYM • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 2

CVE-2022-42245 – Dreamer CMS 4.0.0 SQL Injection

https://notcve.org/view.php?id=CVE-2022-42245

17 Nov 2022 — Dreamer CMS 4.0.01 is vulnerable to SQL Injection. Dreamer CMS 4.0.01 es vulnerable a la inyección SQL. Dreamer CMS version 4.0.0 suffers from a remote SQL injection vulnerability. • https://packetstorm.news/files/id/171585 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-43084

https://notcve.org/view.php?id=CVE-2021-43084

24 Mar 2022 — An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. Se presenta una vulnerabilidad de inyección SQL en Dreamer CMS versión 4.0.0, por medio del parámetro tableName • https://gitee.com/isoftforce/dreamer_cms/issues/I4F93V • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •