Subdreamer

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Subdreamer records in CISA KEV

No Subdreamer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Subdreamer 2 records LOW Subdreamer Light 1 record LOW

Records

3 records

TI-2005-03246 CVE-2005-3423 · GHSA-hm3x-hgjq-8752

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02173 Published 2005-11-01 No fix listed

TI-2010-02246 CVE-2010-2339 · GHSA-hxvx-q4xc-7x53

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote…

LOW 35

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01258 Published 2010-06-18 No fix listed CWE-89

TI-2005-00749 CVE-2005-0805 · GHSA-q5cr-j5m6-xrmp

SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is…

LOW 35

SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demon…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01229 Published 2005-03-20 No fix listed

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0