Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Studio Fabryka Clear all filters
TI-2025-13275 CVE-2025-14532 · GHSA-mrvp-mhjr-mj2j

Remote Code Execution via Unrestricted File Upload in DobryCMS

Priority MEDIUM 49

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00623 Published 2026-03-02 No fix listed CWE-434
TI-2025-11435 CVE-2025-12462 · GHSA-wm44-5cvm-mq2q

Blind SQL Injection in DobryCMS

Priority MEDIUM 49

A Blind SQL injection vulnerability has been identified in DobryCMS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00505 Published 2026-03-02 Fixed in 8.0 CWE-89
TI-2025-07816 CVE-2025-8536 · GHSA-4j2f-66wq-wgg2

SQL Injection in DobryCMS

Priority MEDIUM 46

A SQL injection vulnerability has been identified in DobryCMS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00301 Published 2025-10-24 Fixed in 3.0 CWE-89
TI-2025-03907 CVE-2025-4379 · GHSA-6285-g4cj-gv36

Reflected XSS in DobryCMS

Priority LOW 30

DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00502 Published 2025-05-23 No fix listed CWE-79