LEMON-S PHP

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

LEMON-S PHP records in CISA KEV

No LEMON-S PHP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gazou Bbs Plus 1 record LOW Simple Oekaki 1 record LOW Simple Oekaki Bbs 1 record LOW Twit Bbs 1 record LOW

Records

5 records

TI-2015-02624 CVE-2015-2970 · GHSA-4559-h45q-86vm

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete…

LOW 32

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01611 Published 2015-07-10 No fix listed CWE-22

TI-2016-06569 CVE-2016-7817 · GHSA-5c54-43wg-86rc

Cross-site scripting in LEMON-S PHP Simple keitai chat

LOW 29

Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00872 Published 2017-06-09 No fix listed CWE-79

TI-2015-02628 CVE-2015-2974 · GHSA-c862-pfgc-5rp7

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML…

LOW 26

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01344 Published 2015-07-29 No fix listed CWE-20

TI-2015-02643 CVE-2015-2989 · GHSA-w4mf-q8hp-5fgh

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0095 Published 2015-09-07 No fix listed CWE-79

TI-2015-02623 CVE-2015-2969 · GHSA-374h-xqp9-v748

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2015-07-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	5
Low	0
No CVSS	0