Volerion logoVolerion
Volerion logoVolerion

Interinfo DreamMaker Arbitrary File Upload Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing arbitrary file upload has been identified in Interinfo DreamMaker versions through 2.2. This vulnerability enables privileged remote attackers to upload and execute web shell backdoors, facilitating arbitrary code execution on the server.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server.

Remediation

Users are advised to update to DreamMaker version Java Composer 2.3 or later.

Added: May 29, 2026, 2:39 PM
Updated: May 29, 2026, 2:39 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.8
remediation
0.0
relevance
9.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.