| CVE-2024-48176 |
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control
|
9.8
Critical
|
Nov 5, 2024 |
| CVE-2024-48357 |
LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php
|
9.8
Critical
|
Oct 28, 2024 |
| CVE-2024-48356 |
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php
|
9.8
Critical
|
Oct 28, 2024 |
| CVE-2024-36675 |
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function
|
9.1
Critical
|
Jun 4, 2024 |
| CVE-2024-34982 |
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to…
|
9.8
Critical
|
May 17, 2024 |