Browse CVEs

HIGH 7.3 CVE-2025-4543 A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/adm… Lylme Spage No fix yet Fix from $1,9502025-05-11 CRITICAL 9.8 CVE-2024-48176 Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not b… Lylme Spage Mitigation only Fix from $2,3002024-11-05 CRITICAL 9.8 CVE-2024-48356 LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php. Lylme Spage after 1.6.0 Fix from $2,3002024-10-28 CRITICAL 9.8 CVE-2024-48357 LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. Lylme Spage after 1.6.0 Fix from $2,3002024-10-28 HIGH 7.2 CVE-2024-9790 A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The m… Lylme Spage No fix yet Fix from $1,9502024-10-10 HIGH 7.2 CVE-2024-9788 A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. T… Lylme Spage No fix yet Fix from $1,9502024-10-10 HIGH 7.2 CVE-2024-9789 A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. T… Lylme Spage No fix yet Fix from $1,9502024-10-10 CRITICAL 9.1 CVE-2024-36675 LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function. Lylme Spage No fix yet Fix from $2,3002024-06-04 MEDIUM 6.1 CVE-2024-36674 LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php. Lylme Spage No fix yet Fix from $1,6002024-06-03 CRITICAL 9.8 CVE-2024-34982 An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via upload… Lylme Spage No fix yet Fix from $2,3002024-05-17 CRITICAL 9.8 CVE-2023-45951 lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php. Lylme Spage No fix yet Fix from $2,3002023-10-17 CRITICAL 9.8 CVE-2023-45952 An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading … Lylme Spage No fix yet Fix from $2,3002023-10-17