Dreamer CMS ଯେପର୍ଯ୍ୟନ୍ତ 4.1.3 ueditorConfig?action=config ବିସ୍ତାରିତ ଅଧିକାର

Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame Dreamer CMS ଯେପର୍ଯ୍ୟନ୍ତ 4.1.3 keessatti argameera. Kan miidhamte is hojii hin beekamne faayilii /upload/ueditorConfig?action=config keessa. Hojii jijjiirraa gara ବିସ୍ତାରିତ ଅଧିକାର geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-552 geessa. Dadhabbii kana yeroo 09/03/2023 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti qoodameera. Dogoggorri kun akka CVE-2023-4743tti beekama. Yaaliin weeraraa fageenya irraa jalqabamuu ni danda'a. Faayidaaleen teeknikaa ni jiru. Waliigalatti, meeshaa balaa kana fayyadamuuf jiru. Qorannoo miidhaa (exploit) uummataaf ifoomameera fi fayyadamamuu danda'a. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee ibsameera. Carraa exploit kana github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. VulDB is the best source for vulnerability data and more expert information about this specific topic.

4 ଆଡାପ୍ଟେସନ୍ · 95 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
09/03/2023 08:40 AM		ଅଦ୍ୟତନ 1/3
09/29/2023 07:47 PM		ଅଦ୍ୟତନ 2/3
09/29/2023 07:53 PM		ଅଦ୍ୟତନ 3/3
04/05/2025 03:49 AM
advisory_date1693692000 (09/03/2023)1693692000 (09/03/2023)1693692000 (09/03/2023)1693692000 (09/03/2023)
software_typeContent Management SystemContent Management SystemContent Management SystemContent Management System
cvss2_vuldb_avNNNN
cvss2_vuldb_acHHHH
cvss2_vuldb_ciPPPP
cvss2_vuldb_iiNNNN
cvss2_vuldb_aiNNNN
cvss2_vuldb_ePOCPOCPOCPOC
cvss2_vuldb_rcURURURUR
cvss2_vuldb_auSSSS
cvss2_vuldb_rlNDNDNDND
cvss3_vuldb_prLLLL
cvss3_vuldb_rlXXXX
cvss2_vuldb_basescore2.12.12.12.1
cvss2_vuldb_tempscore1.81.81.81.8
cvss3_vuldb_basescore3.13.13.13.1
cvss3_vuldb_tempscore2.82.82.82.8
cvss3_meta_basescore3.13.13.73.7
cvss3_meta_tempscore2.82.83.63.6
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
software_vendorDreamerDreamerDreamerDreamer
software_nameCMSCMSCMSCMS
software_version<=4.1.3<=4.1.3<=4.1.3<=4.1.3
software_file/upload/ueditorConfig?action=config/upload/ueditorConfig?action=config/upload/ueditorConfig?action=config/upload/ueditorConfig?action=config
vulnerability_cweCWE-552 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-552 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-552 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-552 (ବିସ୍ତାରିତ ଅଧିକାର)
vulnerability_risk1111
cvss3_vuldb_avNNNN
cvss3_vuldb_acHHHH
cvss3_vuldb_uiNNNN
cvss3_vuldb_sUUUU
cvss3_vuldb_cLLLL
cvss3_vuldb_iNNNN
cvss3_vuldb_aNNNN
cvss3_vuldb_ePPPP
cvss3_vuldb_rcRRRR
advisory_urlhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerability
exploit_availability1111
exploit_publicity1111
exploit_urlhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerabilityhttps://github.com/FFR66/Dreamer-CMS_Unauthorized-access-vulnerability
source_cveCVE-2023-4743CVE-2023-4743CVE-2023-4743CVE-2023-4743
cna_responsibleVulDBVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
cve_assigned1693692000 (09/03/2023)1693692000 (09/03/2023)1693692000 (09/03/2023)
cve_nvd_summaryA vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238632. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238632. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238632. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
cvss3_nvd_avNN
cvss3_nvd_acHH
cvss3_nvd_prNN
cvss3_nvd_uiNN
cvss3_nvd_sUU
cvss3_nvd_cLL
cvss3_nvd_iLL
cvss3_nvd_aNN
cvss2_nvd_avNN
cvss2_nvd_acHH
cvss2_nvd_auSS
cvss2_nvd_ciPP
cvss2_nvd_iiNN
cvss2_nvd_aiNN
cvss3_cna_avNN
cvss3_cna_acHH
cvss3_cna_prLL
cvss3_cna_uiNN
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iNN
cvss3_cna_aNN
cve_cnaVulDBVulDB
cvss2_nvd_basescore2.12.1
cvss3_nvd_basescore4.84.8
cvss3_cna_basescore3.13.1
cve_nvd_summaryesSe encontró una vulnerabilidad en Dreamer CMS hasta 4.1.3. Ha sido clasificado como problemático. Una función desconocida del archivo /upload/ueditorConfig?action=config es afectada por esta vulnerabilidad. La manipulación conduce a archivos o directorios accesibles. Es posible lanzar el ataque de forma remota. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-238632. NOTA: Se contactó primeramente al proveedor sobre esta divulgación, pero no respondió de ninguna manera.
cvss2_cna_avN
cvss2_cna_acH
cvss2_cna_auS
cvss2_cna_ciP
cvss2_cna_iiN
cvss2_cna_aiN
cvss2_cna_basescore2.1
cvss4_vuldb_avN
cvss4_vuldb_acH
cvss4_vuldb_prL
cvss4_vuldb_uiN
cvss4_vuldb_vcL
cvss4_vuldb_viN
cvss4_vuldb_vaN
cvss4_vuldb_eP
cvss4_vuldb_atN
cvss4_vuldb_scN
cvss4_vuldb_siN
cvss4_vuldb_saN
cvss4_vuldb_bscore2.3
cvss4_vuldb_btscore1.3

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Do you need the next level of professionalism?

Upgrade your account now!