İçeriğe atla
Noroxi

iteachyou kayıtları

iteachyou üreticisine ait 39 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%5,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

39 kayıt
  • CVE-2021-43084
    39İzleyin

    An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.

    KritikCVSS 9,8İstismar yokEPSS %0

    iteachyou · dreamer cms24 Mar 2022

  • CVE-2023-42279
    39İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.

    KritikCVSS 9,8İstismar yokEPSS %0

    iteachyou · dreamer cms21 Eyl 2023

  • CVE-2023-43382
    36İzleyin

    Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in th

    YüksekCVSS 8,8İstismar yokEPSS %1

    iteachyou · dreamer cms25 Eyl 2023

  • CVE-2023-46886
    36İzleyin

    Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal.

    KritikCVSS 9,1İstismar yokEPSS %0

    iteachyou · dreamer cms29 Kas 2023

  • CVE-2024-3311
    35İzleyin

    Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal

    YüksekCVSS 8,8İstismar yokEPSS %1

    iteachyou · dreamer cms4 Nis 2024

  • CVE-2023-7091
    35İzleyin

    Dreamer CMS uploadFile unrestricted upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms24 Ara 2023

  • CVE-2024-3118
    35İzleyin

    Dreamer CMS Attachment permission

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms31 Mar 2024

  • CVE-2023-48060
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms13 Kas 2023

  • CVE-2023-48058
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms13 Kas 2023

  • CVE-2023-50017
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backup

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms14 Ara 2023

  • CVE-2023-48913
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms30 Kas 2023

  • CVE-2023-48914
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms30 Kas 2023

  • CVE-2023-48912
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms30 Kas 2023

  • CVE-2023-48021
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms14 Kas 2023

  • CVE-2023-48020
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms14 Kas 2023

  • CVE-2023-48017
    35İzleyin

    Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Kas 2023

  • CVE-2023-45907
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45901
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45902
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45903
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45904
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45905
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-45906
    35İzleyin

    Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms17 Eki 2023

  • CVE-2023-43856
    30İzleyin

    Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.

    YüksekCVSS 7,5İstismar yokEPSS %0

    iteachyou · dreamer cms27 Eyl 2023

  • CVE-2023-46887
    30İzleyin

    In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %0

    iteachyou · dreamer cms29 Kas 2023