Advisories · Technology
Dreamer CMS.
Every CVE that names Dreamer CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal
- Dreamer CMS
- Path traversal
- CVSS 6.3 Medium
Dreamer CMS Attachment permission
- Dreamer CMS
- CWE-275
- CVSS 4.3 Medium
Dreamer CMS toEdit cross-site request forgery
- Dreamer CMS
- Cross-site request forgery (CSRF)
- CVSS 6.3 Medium
Dreamer CMS uploadFile unrestricted upload
- Dreamer CMS
- Unrestricted file upload
- CVSS 3.1 Low
Dreamer CMS file access
- Dreamer CMS
- Information disclosure
- CVSS 4.3 Medium
Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity
- Dreamer CMS
- Denial of service
- CVSS 3.5 Low
Dreamer CMS File Upload cross site scripting
- Dreamer CMS
- Cross-site scripting (XSS)