Skip to content
Noroxi

iteachyou records

39 published records for vendor iteachyou.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
5.1%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

39 records
  • CVE-2021-43084
    39Monitor

    An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.

    CriticalCVSS 9.8No exploitEPSS 0%

    iteachyou · dreamer cmsMar 24, 2022

  • CVE-2023-42279
    39Monitor

    Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.

    CriticalCVSS 9.8No exploitEPSS 0%

    iteachyou · dreamer cmsSep 21, 2023

  • CVE-2023-43382
    36Monitor

    Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in th

    HighCVSS 8.8No exploitEPSS 1%

    iteachyou · dreamer cmsSep 25, 2023

  • CVE-2023-46886
    36Monitor

    Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal.

    CriticalCVSS 9.1No exploitEPSS 0%

    iteachyou · dreamer cmsNov 29, 2023

  • CVE-2024-3311
    35Monitor

    Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal

    HighCVSS 8.8No exploitEPSS 1%

    iteachyou · dreamer cmsApr 4, 2024

  • CVE-2023-7091
    35Monitor

    Dreamer CMS uploadFile unrestricted upload

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsDec 24, 2023

  • CVE-2024-3118
    35Monitor

    Dreamer CMS Attachment permission

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsMar 31, 2024

  • CVE-2023-45907
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45901
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45902
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45903
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45904
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45905
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-45906
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsOct 17, 2023

  • CVE-2023-50017
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backup

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsDec 14, 2023

  • CVE-2023-48058
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 13, 2023

  • CVE-2023-48060
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 13, 2023

  • CVE-2023-48912
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 30, 2023

  • CVE-2023-48913
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 30, 2023

  • CVE-2023-48914
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 30, 2023

  • CVE-2023-48021
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 14, 2023

  • CVE-2023-48020
    35Monitor

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 14, 2023

  • CVE-2023-48017
    35Monitor

    Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsNov 17, 2023

  • CVE-2023-43856
    30Monitor

    Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.

    HighCVSS 7.5No exploitEPSS 0%

    iteachyou · dreamer cmsSep 27, 2023

  • CVE-2023-46887
    30Monitor

    In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

    HighCVSS 7.5No exploitEPSS 0%

    iteachyou · dreamer cmsNov 29, 2023