Approved changes feed: RSS · Atom

cpe:2.3:a:interinfo:dreammaker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInterinfo (42ee677c-47ff-56c7-8a83-76f41b642736)
ProductDreammaker (3d4103a4-00d4-569f-b2e1-701b8a1eed8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10075 vulnerable 2026-06-08 07:47:13.626342 Interinfo|DreamMaker - Path Traversal
MEDIUM (5.3)
DreamMaker developed by Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to read file names under arbitrary path by exploiting an Absolute Path Traversal vulnerability.
Published: 2026-05-29T12:53:18.228Z
Updated: 2026-05-29T15:25:29.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10074 vulnerable 2026-06-08 07:47:13.626032 Interinfo|DreamMaker - Arbitrary File Read
MEDIUM (4.9)
DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files.
Published: 2026-05-29T12:45:46.448Z
Updated: 2026-05-29T15:25:50.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10073 vulnerable 2026-06-08 07:47:13.625803 Interinfo|DreamMaker - Arbitrary File Read
HIGH (7.5)
DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files.
Published: 2026-05-29T12:39:31.934Z
Updated: 2026-05-29T15:26:36.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10072 vulnerable 2026-06-08 07:47:13.625464 Interinfo|DreamMaker - Arbitrary File Upload
HIGH (7.2)
DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2026-05-29T12:36:09.713Z
Updated: 2026-05-29T15:27:39.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10071 vulnerable 2026-06-08 07:47:13.625034 Interinfo|DreamMaker - Arbitrary File Upload
CRITICAL (9.8)
DreamMaker developed by Interinfo has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Published: 2026-05-29T12:32:43.004Z
Updated: 2026-05-29T13:28:37.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11979 vulnerable 2026-06-08 06:23:50.801468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11978 vulnerable 2026-06-08 06:23:50.800901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.