PT-2025-37325 · Iteachyou · Iteachyou Dreamer Cms

Aibot888 · Published 2025-09-12 · Updated 2025-09-12 · CVE-2025-10320

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: iteachyou Dreamer CMS versions through 4.1.3.2

Description: A weakness exists in iteachyou Dreamer CMS related to weak password requirements during some unknown processing of the file /admin/user/updatePwd. Remote exploitation is possible, but requires a high degree of complexity and is assessed as difficult. The exploit is publicly available. The vendor was contacted regarding this issue but did not respond.

Recommendations: Update iteachyou Dreamer CMS to a version beyond 4.1.3.2.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2025-10320

Affected Products

Iteachyou Dreamer Cms

References · 7

• 🔥 https://cnblogs.com/aibot/p/19063320 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10320 · Security Note
• https://vuldb.com/?submit.643393 · Note
• https://vuldb.com/?ctiid.323746 · Note
• https://vuldb.com/?id.323746 · Note
• https://t.me/CVEtracker/32381 · Telegram Post
• https://twitter.com/CVEnew/status/1966536907464073686 · Twitter Post