Skip to content
OpenAdvisories

Vendor

doramart

4 known vulnerabilities.

Products

DoraCMS 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-3795

    doramart DoraCMS v1.js createFileBypath path traversal

    A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /DoraCMS/server/app/router/api/v1.js. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit h…

    doramart DoraCMS
  • Medium 5.8
    CVE-2026-25870

    DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF

    DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts user-supplied URLs and performs server-side HTTP or HTTPS requests without sufficient validation…

    doramart DoraCMS