Dreamlevels

dreamlevels

5 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Dream Pics Builder

dream_pics_builder

Dreamnews Manager

dreamnews_manager

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4746 1Dreamlevels 1Dreampoll Apr 29, 2026 Mar 26, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action.
CVE-2009-4745 1Dreamlevels 1Dreampoll Apr 29, 2026 Mar 26, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action...Show more Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action.Show less
CVE-2008-3189 1Dreamlevels 1Dreamnews Manager Apr 23, 2026 Jul 16, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3119 1Dreamlevels 1Dream Pics Builder Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVE-2005-4254 1Dreamlevels 1Dream Poll Apr 16, 2026 Dec 15, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter.