Skip to content
Noroxi

subdreamer records

3 published records for vendor subdreamer.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2005-3423
      31Monitor

      Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusernam

      HighCVSS 7.5Proof of conceptEPSS 2%

      subdreamer · subdreamerNov 1, 2005

    • CVE-2010-2339
      30Monitor

      SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the cat

      HighCVSS 7.5No exploitEPSS 1%

      subdreamer · subdreamerJun 18, 2010

    • CVE-2005-0805
      30Monitor

      SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary

      HighCVSS 7.5Proof of conceptEPSS 1%

      subdreamer · subdreamer lightMay 2, 2005