Filtered by vendor Studio Fabryka Subscriptions
Filtered by product Dobrycms Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12462 1 Studio Fabryka 1 Dobrycms 2026-03-03 N/A
A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.
CVE-2025-14532 1 Studio Fabryka 1 Dobrycms 2026-03-03 N/A
DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.
CVE-2025-8536 1 Studio Fabryka 1 Dobrycms 2025-10-27 N/A
A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.