Iteachyou's vulnerability footprint concentrates in Dreamer CMS, a content-management system whose disclosures span a narrow but notably represented product scope within the vulnerability landscape. The recurring weakness classes—cross-site request forgery, cross-site scripting, path traversal, improper access controls, and SQL injection—reflect the input-handling and access-validation demands of web-facing CMS platforms; these are structural risks inherent to building content-delivery and user-management functionality. A meaningful share of this vendor's vulnerabilities reach serious severity, underscoring the risk posed by CMS flaws that can affect site integrity, user data, and downstream visitors. Defenders deploying Dreamer CMS should prioritize input-validation and access-control hardening, track this vendor's patches closely, and audit file and directory permissions; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Iteachyou over time
Signals from CVEs in this vendor scope (39 CVEs).
39 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-43084CRITICAL An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter. | Mar 24, 2022 | 9.8 | 30 | NO | NO |
CVE-2023-42279CRITICAL Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form. | Sep 21, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-46886CRITICAL Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive | Nov 29, 2023 | 9.1 | 28 | NO | NO |
CVE-2023-48021HIGH Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update. | Nov 14, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-48020HIGH Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus. | Nov 14, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-43382HIGH Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function. | Sep 25, 2023 | 8.8 | 26 | NO | NO |
CVE-2024-3118HIGH A vulnerability, which was classified as critical, has been found in Dreamer CMS up to 4.1.3. This issue affects some unknown processing of the component Attachment Handler. The ma | Mar 31, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-3311HIGH A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/ | Apr 4, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-7091HIGH A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /upload/uploadFile. The manipulation of the | Dec 24, 2023 | 8.8 | 24 | NO | NO |
CVE-2023-48914HIGH Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add. | Nov 30, 2023 | 8.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (39 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Iteachyou.
Media articles that mention a CVE ID that affects a product developed by Iteachyou — matched by CVE ID, not by vendor name.