TI-2025-04056 CVE-2025-4541 · GHSA-35qw-9rhr-g626
LmxCMS POST Request ZtAction.class.php manageZt sql injection
Priority MEDIUM 57
A vulnerability classified as critical has been found in LmxCMS 1.41.
Vulnerabilities
11 records
TI-2025-01259 CVE-2025-1465 · GHSA-4jjw-p5j8-wcgh
lmxcms Maintenance db.inc.php code injection
Priority MEDIUM 44
A vulnerability, which was classified as problematic, was found in lmxcms 1.41.
TI-2024-07901 CVE-2024-8523 · GHSA-c86h-f64g-3994
lmxcms SQL Command Execution Module admin.php formatData code injection
Priority MEDIUM 56
A vulnerability was found in lmxcms up to 1.4 and classified as critical.
TI-2021-14199 CVE-2021-35437 · GHSA-g4j7-2fpq-j746
SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.
Priority HIGH 82
SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.
TI-2023-25355 CVE-2023-46958 · GHSA-hm7g-wj92-rj6w
An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
Priority MEDIUM 51
An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
TI-2023-04619 CVE-2023-5017 · GHSA-j5r3-qrhr-2674
lmxcms admin.php sql injection
Priority MEDIUM 43
A vulnerability was found in lmxcms up to 1.41.
TI-2023-13940 CVE-2023-29598 · GHSA-hx7x-h8xv-jgq3
lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.
Priority HIGH 82
lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.
TI-2023-01249 CVE-2023-1322 · GHSA-4f6p-h9jv-xcr3
lmxcms BookAction.class.php reply sql injection
Priority MEDIUM 43
A vulnerability was found in lmxcms 1.41 and classified as critical.
TI-2023-01248 CVE-2023-1321 · GHSA-7xq5-7q9p-5vvc
lmxcms AcquisiAction.class.php update sql injection
Priority MEDIUM 43
A vulnerability has been found in lmxcms 1.41 and classified as critical.
TI-2023-09153 CVE-2023-23136 · GHSA-666v-4gvx-34rc
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.
Priority MEDIUM 64
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.
TI-2022-23807 CVE-2022-48094 · GHSA-4326-c464-p449
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.
Priority MEDIUM 56
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.