Vulnerabilities > Iteachyou > Medium

DATE CVE VULNERABILITY TITLE RISK
2025-02-21 CVE-2025-1548 Code Injection vulnerability in Iteachyou Dreamer CMS 4.1.3
A vulnerability was found in iteachyou Dreamer CMS 4.1.3.
network
low complexity
iteachyou CWE-94
4.6
2025-02-21 CVE-2025-1543 Path Traversal vulnerability in Iteachyou Dreamer CMS 4.1.3
A vulnerability, which was classified as problematic, has been found in iteachyou Dreamer CMS 4.1.3.
network
low complexity
iteachyou CWE-22
4.3
2024-03-10 CVE-2024-2354 Unspecified vulnerability in Iteachyou Dreamer CMS 4.1.3
A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3.
network
low complexity
iteachyou
6.5
2023-12-08 CVE-2023-49484 Cross-site Scripting vulnerability in Iteachyou Dreamer CMS 4.1.3
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management department.
network
low complexity
iteachyou CWE-79
5.4
2023-11-13 CVE-2023-48063 Cross-Site Request Forgery (CSRF) vulnerability in Iteachyou Dreamer CMS 4.1.3
An issue was discovered in dreamer_cms 4.1.3.
network
low complexity
iteachyou CWE-352
4.3
2023-09-27 CVE-2023-43857 Cross-site Scripting vulnerability in Iteachyou Dreamer CMS 4.1.3
Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/u/toIndex.
network
low complexity
iteachyou CWE-79
5.4
2023-09-03 CVE-2023-4743 Files or Directories Accessible to External Parties vulnerability in Iteachyou Dreamer CMS
A vulnerability was found in Dreamer CMS up to 4.1.3.
network
high complexity
iteachyou CWE-552
4.8
2023-05-02 CVE-2023-2473 Algorithmic Complexity vulnerability in Iteachyou Dreamer CMS
A vulnerability was found in Dreamer CMS up to 4.1.3.
network
low complexity
iteachyou CWE-407
4.3
2023-04-18 CVE-2023-29774 Cross-site Scripting vulnerability in Iteachyou Dreamer CMS 3.0.1
Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).
network
low complexity
iteachyou CWE-79
5.4
2023-03-30 CVE-2023-1746 Cross-site Scripting vulnerability in Iteachyou Dreamer CMS
A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0.
network
low complexity
iteachyou CWE-79
5.4