CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

Sql injection

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2021-35437

CVE-2021-35437 affects LMXCMS v1.4 . The vulnerability is described as a SQL injection that allows an attacker to execute arbitrary code via the TagsAction.class . Multiple connected sources corroborate that the issue stems from insufficient validation of externally supplied SQL statements. The d...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

CVE-2021-35437

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...

LMXCMS SQL注入漏洞

lmxcms dream cms is a website building system of China dream cms lmxcms company. A SQL injection vulnerability exists in LMXCMS v1.4, which stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute arbitrary code vi...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

Design/Logic Flaw

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

CVE-2023-46958 affects lmxcms v1.41 and enables remote code execution via a crafted script to the admin.php file. The impact is arbitrary code execution with high severity (CVSSv3.1: 9.8). Concrete remediation details are not provided in the documents; one PT Security entry recommends temporarily...

lmxcms Security Vulnerabilities

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. A security vulnerability exists in lmxcms version v.1.41, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a carefully crafted script...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

PT-2023-30271

Name of the Vulnerable Software and Affected Versions lmxcms version 1.41 Description An issue in lmxcms allows a remote attacker to execute arbitrary code via a crafted script to the "admin.php" file. Recommendations For lmxcms version 1.41, consider disabling access to the "admin.php" file as a...

CVE-2023-5017

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was...

CVE-2023-5017

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was...

Sql injection

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was...

CVE-2023-5017

CVE-2023-5017 affects lmxcms up to version 1.41. The vulnerability exists in admin.php where manipulating the lid parameter leads to SQL injection. Exploitation details are not provided in the core initial document, but multiple connected sources (PRION, NVD, RH, CVE lists, PT Security) consisten...

CVE-2023-5017 lmxcms admin.php sql injection

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was...