Iteachyou Dreamer Cms vulnerabilities

• iteachyou dreamer cms iteachyou Dreamer CMS Attachment download improper authorization CVE-2025-3977 5.3 MediumApril 27, 2025
• iteachyou dreamer cms iteachyou Dreamer CMS edit cross site scripting CVE-2025-1548 5.1 MediumFebruary 21, 2025
• iteachyou dreamer cms iteachyou Dreamer CMS ueditor-1.4.3.3 path traversal CVE-2025-1543 5.3 MediumFebruary 21, 2025
• dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal CVE-2024-3311 6.3 MediumApril 4, 2024
• dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS Attachment permission CVE-2024-3118 6.3 MediumMarch 31, 2024
• dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS toEdit cross-site request forgery CVE-2024-2354 4.3 MediumMarch 10, 2024
• dreamer cms project cms, iteachyou dreamer cms +1 more An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak... CVE-2024-25811 6.5 MediumFebruary 29, 2024
• dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS uploadFile unrestricted upload CVE-2023-7091 6.3 MediumDecember 24, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-50017 8.8 HighDecember 14, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the... CVE-2023-49484 5.4 MediumDecember 8, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-48914 8.8 HighNovember 30, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-48913 8.8 HighNovember 30, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-48912 8.8 HighNovember 30, 2023
• iteachyou dreamer cms In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File... CVE-2023-46887 7.5 HighNovember 29, 2023
• iteachyou dreamer cms Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template... CVE-2023-46886 9.1 CriticalNovember 29, 2023
• iteachyou dreamer cms Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF... CVE-2023-48017 8.8 HighNovember 18, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability... CVE-2023-48021 8.8 HighNovember 14, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability... CVE-2023-48020 8.8 HighNovember 14, 2023
• iteachyou dreamer cms An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a... CVE-2023-48063 4.3 MediumNovember 13, 2023
• dreamer cms project cms, iteachyou dreamer cms +1 more Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-48060 8.8 HighNovember 13, 2023
• dreamer cms project cms, iteachyou dreamer cms +1 more Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-48058 8.8 HighNovember 13, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45907 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45906 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45905 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45904 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45903 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45902 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the... CVE-2023-45901 8.8 HighOctober 17, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability... CVE-2023-43857 5.4 MediumSeptember 26, 2023
• iteachyou dreamer cms Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the... CVE-2023-43856 7.5 HighSeptember 26, 2023
• iteachyou dreamer cms Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to... CVE-2023-43382 8.8 HighSeptember 25, 2023
• iteachyou dreamer cms Dreamer CMS 4.1.3 is vulnerable to SQL Injection. CVE-2023-42279 9.8 CriticalSeptember 21, 2023
• dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS file access CVE-2023-4743 3.1 LowSeptember 3, 2023
• iteachyou dreamer cms Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity CVE-2023-2473 4.3 MediumMay 2, 2023
• iteachyou dreamer cms Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS). CVE-2023-29774 5.4 MediumApril 18, 2023
• iteachyou dreamer cms Dreamer CMS File Upload cross site scripting CVE-2023-1746 3.5 LowMarch 30, 2023
• iteachyou dreamer cms Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to... CVE-2023-27084 5.3 MediumMarch 16, 2023
• isoftforce dreamer cms isoftforce Dreamer CMS cross site scripting CVE-2023-0513 3.5 LowJanuary 26, 2023
• iteachyou dreamer cms An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. CVE-2021-43084 9.8 CriticalMarch 24, 2022