Vulnerabilities (CVE)

Filtered by vendor Subdreamer Subscribe
Filtered by product Subdreamer
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2339 1 Subdreamer 1 Subdreamer 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
CVE-2005-3423 1 Subdreamer 1 Subdreamer 2024-02-04 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.