Vendors / Studio Fabryka Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Studio Fabryka records in CISA KEV No Studio Fabryka vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00623 · Published 2026-03-02 · No fix listed CWE-434
Priority MEDIUM 49
A Blind SQL injection vulnerability has been identified in DobryCMS.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00505 · Published 2026-03-02 · Fixed in 8.0 CWE-89
Priority MEDIUM 46
A SQL injection vulnerability has been identified in DobryCMS.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00301 · Published 2025-10-24 · Fixed in 3.0 CWE-89
Priority LOW 30
DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS).
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00502 · Published 2025-05-23 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 0 1 0 0
