Skip to content

Known vulnerabilities in lylme_spage

Is your version affected?

CVE Summary Score Published
CVE-2024-48176 Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control 9.8 Critical Nov 5, 2024
CVE-2024-48357 LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php 9.8 Critical Oct 28, 2024
CVE-2024-48356 LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php 9.8 Critical Oct 28, 2024
CVE-2024-9790 A vulnerability was found in LyLme_spage 1.9.5 5.1 Medium Oct 10, 2024
CVE-2024-9789 A vulnerability was found in LyLme_spage 1.9.5 and classified as critical 5.1 Medium Oct 10, 2024
CVE-2024-9788 A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical 5.1 Medium Oct 10, 2024
CVE-2024-36675 LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function 9.1 Critical Jun 4, 2024
CVE-2024-36674 LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php 6.1 Medium Jun 3, 2024
CVE-2024-34982 An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to… 9.8 Critical May 17, 2024

Other LyLme products