Advisories · Technology
dontdream BP Profile Search.
Every CVE that names dontdream BP Profile Search among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
- dontdream BP Profile Search
- File inclusion
- CVSS 6.1 Medium
BP Profile Search <= 5.7.5 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
- dontdream BP Profile Search
- Cross-site request forgery (CSRF)