Dreamer Cms Luki w zabezpieczeniach

Oś czasu

Wersja

4.1.3	26
4.1.0	3
4.1.1	3
4.1.2	3
4.0	2

Przeciwdziałanie

Official Fix	3
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	29

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	5
Unproven	0
Not Defined	27

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	28

Uwierzytelnianie

Not Defined	0
High	0
Low	14
None	18

Interakcja z użytkownikiem

Not Defined	0
Required	21
None	11

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	2
≤7	20
≤8	3
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	4
≤7	19
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	7
≤5	19
≤6	1
≤7	5
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	0
≤8	2
≤9	17
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	3
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	3
<2k	29
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	22
<2k	10
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (9): 3.0.1, 4, 4.0, 4.0.01, 4.0.1, 4.1, 4.1.1, 4.1.2, 4.1.3

Typ oprogramowania: Content Management System

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-04-04	6.3	6.0	Dreamer CMS ThemesController.java ZipUtils.unZipFiles directory traversal	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.34	CVE-2024-3311
2024-03-30	6.3	6.0	Dreamer CMS Attachment privilege escalation	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2024-3118
2024-03-09	4.3	4.1	Dreamer CMS toEdit cross site request forgery	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2024-2354
2024-02-29	3.5	3.4	Dreamer CMS Backup File information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2024-25811
2023-12-24	7.1	6.9	Dreamer CMS uploadFile privilege escalation	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2023-7091
2023-12-15	6.5	6.5	Dreamer CMS backup cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-50017
2023-12-08	4.4	4.4	Dreamer CMS Article Management Department cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-49484
2023-11-30	6.5	6.5	Dreamer CMS add cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-48914
2023-11-30	6.5	6.5	Dreamer CMS delete cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-48913
2023-11-30	6.5	6.5	Dreamer CMS edit cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-48912

22 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

więcej wpisów autorstwa Dreamer

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!