Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Lmxcms records in CISA KEVNo Lmxcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00656 · Published 2023-04-13 · No fix listed CWE-89
Priority HIGH 82
SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00983 · Published 2023-11-16 · No fix listed CWE-89
Priority MEDIUM 64
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00824 · Published 2023-02-01 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability classified as critical has been found in LmxCMS 1.41.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00552 · Published 2025-05-11 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability was found in lmxcms up to 1.4 and classified as critical.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.0096 · Published 2024-09-07 · No fix listed CWE-94
Priority MEDIUM 56
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0067 · Published 2023-02-01 · No fix listed CWE-552
Priority MEDIUM 51
An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01275 · Published 2023-11-02 · No fix listed CWE-94
Priority MEDIUM 44
A vulnerability, which was classified as problematic, was found in lmxcms 1.41.
CVSS 4.0LOW 2.1· Network · High privileges · No interaction · EPSS 0.00537 · Published 2025-02-19 · No fix listed CWE-74
Priority MEDIUM 43
A vulnerability was found in lmxcms up to 1.41.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.005 · Published 2023-09-17 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in lmxcms 1.41 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-03-10 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability has been found in lmxcms 1.41 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-03-10 · No fix listed CWE-89
THREATIST.IORead the docs