Skip to content
Noroxi

dreamlevels records

5 published records for vendor dreamlevels.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2005-4254
      30Monitor

      SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5Proof of conceptEPSS 1%

      dreamlevels · dream pollDec 15, 2005

    • CVE-2008-3119
      30Monitor

      SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page paramet

      HighCVSS 7.5Proof of conceptEPSS 1%

      dreamlevels · dream pics builderJul 10, 2008

    • CVE-2008-3189
      30Monitor

      SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id p

      HighCVSS 7.5Proof of conceptEPSS 1%

      dreamlevels · dreamnews managerJul 16, 2008

    • CVE-2009-4745
      30Monitor

      Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands vi

      HighCVSS 7.5Proof of conceptEPSS 1%

      dreamlevels · dreampollMar 26, 2010

    • CVE-2009-4746
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or

      MediumCVSS 4.3Proof of conceptEPSS 1%

      dreamlevels · dreampollMar 26, 2010