Layerbb
Layerbb: vulnerabilidades y CVE
Layerbb tiene 8 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses1
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-47954 | Alta (8.8) | 0.24% | — | 16 may 2026 | LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter. Attackers can send POST requests to… |
| CVE-2019-16531 | Alta (8.8) | 2.5% | — | 20 sept 2019 | LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php. |
| CVE-2019-13974 | Alta (8.8) | 0.61% | — | 19 jul 2019 | LayerBB 1.1.3 allows conversations.php/cmd/new CSRF. |
| CVE-2019-13973 | Crítica (9.8) | 1.8% | — | 19 jul 2019 | LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. |
| CVE-2019-13972 | Media (6.1) | 0.86% | — | 19 jul 2019 | LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997. |
| CVE-2018-17997 | Media (6.1) | 3.6% | — | 21 mar 2019 | LayerBB 1.1.1 allows XSS via the titles of conversations (PMs). |
| CVE-2018-17996 | Media (6.5) | 3.0% | — | 21 mar 2019 | LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/. |
| CVE-2018-17988 | Crítica (9.8) | 2.0% | — | 7 mar 2019 | LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter. |