Vulnerabilities

TI-2025-04058 CVE-2025-4543 · GHSA-wcwc-445x-wf23

LyLme Spage ajax_link.php sql injection

HIGH 70

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00518 Published 2025-05-11 No fix listed CWE-74

TI-2024-32291 CVE-2024-48176 · GHSA-cjhr-gw79-v8fh

Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control.

MEDIUM 49

Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00466 Published 2024-11-05 No fix listed CWE-863

TI-2024-32367 CVE-2024-48357 · GHSA-c8r4-qw78-4r3m

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.

HIGH 82

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2024-10-28 No fix listed CWE-89

TI-2024-32366 CVE-2024-48356 · GHSA-p94g-pv57-gw9x

LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.

HIGH 82

LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2024-10-28 No fix listed CWE-89

TI-2024-09087 CVE-2024-9790 · GHSA-h8gf-9w3g-3qg4

LyLme_spage sou.php sql injection

MEDIUM 56

A vulnerability was found in LyLme_spage 1.9.5.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00563 Published 2024-10-10 No fix listed CWE-89

TI-2024-09086 CVE-2024-9789 · GHSA-6qmr-jh3v-q6rr

LyLme_spage apply.php sql injection

MEDIUM 56

A vulnerability was found in LyLme_spage 1.9.5 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00563 Published 2024-10-10 No fix listed CWE-89

TI-2024-09085 CVE-2024-9788 · GHSA-7q5h-6q9q-9qf9

LyLme_spage tag.php sql injection

MEDIUM 56

A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00563 Published 2024-10-10 No fix listed CWE-89

TI-2024-24369 CVE-2024-36675 · GHSA-6fjg-5w3q-x6m9

LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.

HIGH 80

LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01438 Published 2024-06-04 No fix listed CWE-918

TI-2024-24368 CVE-2024-36674 · GHSA-5jhg-px89-wqm9

LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.

MEDIUM 60

LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00322 Published 2024-06-03 No fix listed CWE-79

TI-2024-23164 CVE-2024-34982 · GHSA-c4mm-9h9f-6xf6

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage…

HIGH 82

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04675 Published 2024-05-17 No fix listed CWE-434

TI-2023-24669 CVE-2023-45952 · GHSA-63w9-q3qg-2wg7

An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage…

HIGH 82

An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00916 Published 2023-10-17 No fix listed CWE-434

TI-2023-24668 CVE-2023-45951 · GHSA-rq9v-22cg-86qc

lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.

HIGH 82

lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2023-10-17 No fix listed CWE-89

Vulnerabilities

Filters