CVE-2015-4714
Published Jun 22, 2015Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body.
Vendor archive
dream-multimedia-tv CVEs
Beta · best-effort4 CVEs tagged to vendor dream-multimedia-tv — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2012-1025
Published Feb 8, 2012Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in…
CVE-2012-1024
Published Feb 8, 2012Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVE-2011-4716
Published Dec 8, 2011Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
Showing 1-4 of 4 CVEsPage 1 of 1