PT-2023-14177 · Unknown · Dreamer Cms

Published 2023-04-16 · Updated 2023-04-24 · CVE-2022-43128

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Dreamer CMS version 4.0.1

Description The issue allows SQL injection via ArchivesMapper.xml.

Recommendations For Dreamer CMS version 4.0.1, consider restricting access to ArchivesMapper.xml to minimize the risk of exploitation. As a temporary workaround, avoid using ArchivesMapper.xml until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Related Identifiers

CVE-2022-43128

Affected Products

Dreamer Cms

References · 4

• 🔥 https://exploit-db.com/exploits/51134 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43128 · Security Note
• https://t.me/cibsecurity/62245 · Telegram Post
• https://t.me/cvenotify/48360 · Telegram Post