Studio Fabryka Dobrycms
4 CVEs affecting Studio Fabryka Dobrycms. Latest disclosed: 2026-03-02. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14532 | Critical | 9.8 | 2026-03-02 | DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result… |
CVE-2025-12462 | | 2026-03-02 | A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple… | |
CVE-2025-8536 | | 2025-10-24 | A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Inj… | |
CVE-2025-4379 | | 2025-05-23 | DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows arbitrary JavaSc… |