Skip to content
OpenAdvisories

Vendor

Studio Fabryka

4 known vulnerabilities.

Products

DobryCMS 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-14532

    Remote Code Execution via Unrestricted File Upload in DobryCMS

    DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.

    Studio Fabryka DobryCMS
  • Critical 9.3
    CVE-2025-12462

    Blind SQL Injection in DobryCMS

    A Blind SQL injection vulnerability has been identified in DobryCMS.  A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.

    Studio Fabryka DobryCMS
  • Critical 9.3
    CVE-2025-8536

    SQL Injection in DobryCMS

    A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.

    Studio Fabryka DobryCMS