Studio Fabryka vulnerabilities
We track 3 vulnerabilities in Studio Fabryka products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 2, 2026.
Latest Studio Fabryka vulnerabilities
- 9.8 Critical severity
DobryCMS: Unrestricted Upload of File with Dangerous Type
DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.
- 9.3 Critical severity
DobryCMS: Improper Neutralization of Special Elements used in an SQL Command
A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.
- 9.3 Critical severity
DobryCMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.