TI-2024-32367 CVE-2024-48357 · GHSA-c8r4-qw78-4r3m
LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
Priority HIGH 82
LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
LyLme
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
LyLme records in CISA KEVNo LyLme vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2024-32366 CVE-2024-48356 · GHSA-p94g-pv57-gw9x
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
Priority HIGH 82
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
TI-2024-23164 CVE-2024-34982 · GHSA-c4mm-9h9f-6xf6
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage…
Priority HIGH 82
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file.
TI-2023-24669 CVE-2023-45952 · GHSA-63w9-q3qg-2wg7
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage…
Priority HIGH 82
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.
TI-2023-24668 CVE-2023-45951 · GHSA-rq9v-22cg-86qc
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
Priority HIGH 82
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
TI-2024-24369 CVE-2024-36675 · GHSA-6fjg-5w3q-x6m9
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
Priority HIGH 80
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
TI-2025-04058 CVE-2025-4543 · GHSA-wcwc-445x-wf23
LyLme Spage ajax_link.php sql injection
Priority HIGH 70
A vulnerability, which was classified as critical, was found in LyLme Spage 2.1.
TI-2024-24368 CVE-2024-36674 · GHSA-5jhg-px89-wqm9
LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
Priority MEDIUM 60
LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.
TI-2024-09087 CVE-2024-9790 · GHSA-h8gf-9w3g-3qg4
LyLme_spage sou.php sql injection
Priority MEDIUM 56
A vulnerability was found in LyLme_spage 1.9.5.
TI-2024-09086 CVE-2024-9789 · GHSA-6qmr-jh3v-q6rr
LyLme_spage apply.php sql injection
Priority MEDIUM 56
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical.
TI-2024-09085 CVE-2024-9788 · GHSA-7q5h-6q9q-9qf9
LyLme_spage tag.php sql injection
Priority MEDIUM 56
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical.
TI-2024-32291 CVE-2024-48176 · GHSA-cjhr-gw79-v8fh
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control.
Priority MEDIUM 49
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control.