Home/Product/lylme spage
Product

lylme spage

12 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-4543
all versions
A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_sp
7.3HIGH
CVE-2024-48176
all versions
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verificat
9.8CRITICAL
CVE-2024-48356
<= 1.6.0
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
9.8CRITICAL
CVE-2024-48357
>= 1.2.0 and <= 1.6.0
LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
9.8CRITICAL
CVE-2024-9790
all versions
A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /a
4.7MEDIUM
CVE-2024-9789
all versions
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file
4.7MEDIUM
CVE-2024-9788
all versions
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the fil
4.7MEDIUM
CVE-2024-36675
all versions
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
9.1CRITICAL
CVE-2024-36674
all versions
LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
6.1MEDIUM
CVE-2024-34982
all versions
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitr
9.8CRITICAL
CVE-2023-45952
all versions
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary
9.8CRITICAL
CVE-2023-45951
all versions
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
9.8CRITICAL
threatengine.sh