Vulnerabilities > Lylme

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-9790 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability was found in LyLme_spage 1.9.5.
network
low complexity
lylme CWE-89
7.2
2024-10-10 CVE-2024-9788 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical.
network
low complexity
lylme CWE-89
7.2
2024-10-10 CVE-2024-9789 SQL Injection vulnerability in Lylme Spage 1.9.5
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical.
network
low complexity
lylme CWE-89
7.2
2024-06-04 CVE-2024-36675 Server-Side Request Forgery (SSRF) vulnerability in Lylme Spage 1.9.5
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
network
low complexity
lylme CWE-918
critical
9.1
2023-10-17 CVE-2023-45951 SQL Injection vulnerability in Lylme Spage 1.7.0
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
network
low complexity
lylme CWE-89
critical
9.8
2023-10-17 CVE-2023-45952 Unrestricted Upload of File with Dangerous Type vulnerability in Lylme Spage 1.7.0
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
lylme CWE-434
critical
9.8