Dreamlevels

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Dreamlevels records in CISA KEV

No Dreamlevels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dreampoll 2 records LOW Dream Pics Builder 1 record LOW Dream Poll 1 record LOW Dreamnews Manager 1 record LOW

Records

2 records in Dreampoll · all components

TI-2009-04501 CVE-2009-4745 · GHSA-qhx7-j395-3hwr

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow…

LOW 35

Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.009 Published 2010-03-26 No fix listed CWE-89

TI-2009-04502 CVE-2009-4746 · GHSA-2g6v-2xh6-p5mw

Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01204 Published 2010-03-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0