Lylme
Lylme Spage: vulnerabilidades y CVE
Lylme Spage tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 7 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas7
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-4543 | Media (6.9) | 0.49% | — | 11 may 2025 | A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql… |
| CVE-2024-48176 | Crítica (9.8) | 0.47% | — | 5 nov 2024 | Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the… |
| CVE-2024-48356 | Crítica (9.8) | 0.56% | — | 28 oct 2024 | LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php. |
| CVE-2024-48357 | Crítica (9.8) | 0.56% | — | 28 oct 2024 | LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. |
| CVE-2024-9790 | Media (5.1) | 0.56% | — | 10 oct 2024 | A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql injection. It is possible… |
| CVE-2024-9789 | Media (5.1) | 0.56% | — | 10 oct 2024 | A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql injection. The attack… |
| CVE-2024-9788 | Media (5.1) | 0.56% | — | 10 oct 2024 | A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack… |
| CVE-2024-36675 | Crítica (9.1) | 1.4% | — | 4 jun 2024 | LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function. |
| CVE-2024-36674 | Media (6.1) | 0.32% | — | 3 jun 2024 | LyLme_spage v1.9.5 is vulnerable to Cross Site Scripting (XSS) via admin/link.php. |
| CVE-2024-34982 | Crítica (9.8) | 4.7% | — | 17 may 2024 | An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2023-45952 | Crítica (9.8) | 0.84% | — | 17 oct 2023 | An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2023-45951 | Crítica (9.8) | 0.65% | — | 17 oct 2023 | lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.