Studiofabryka Dorbycms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Studiofabryka Dorbycms: 1 record(s), with affected versions and fixes.
cpe:2.3:a:studiofabryka:dorbycms

CVE-2025-14532 Critical · 9.8 CWE-434 Mar 2, 2026

Remote Code Execution via Unrestricted File Upload in DobryCMS

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.