CVE-2024-48176

Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

CVE-2024-48357

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

PT-2024-33087 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme Spage versions prior to 1.6.1 Description: The issue allows for SQL Injection via the "/admin/group.php" API endpoint. Recommendations: For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue...

LyLme Spage 安全漏洞

LyLme Spage Six Zero navigation page is China Six Zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background add links , customize the search engine , precipitation of the most valuable links , no...

CVE-2024-48357

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php...

CVE-2024-48356

LyLme Spage

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

CVE-2024-48357

LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php...

LyLme Spage 安全漏洞

LyLme Spage Six Zero navigation page is China Six Zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

CVE-2024-48357

CVE-2024-48357 affects LyLme Spage versions 1.2.0 through 1.6.0. The vulnerability is a SQL injection via /admin/apply.php, with a CVSS v3.1 base score of 9.8 (CRITICAL) and impacts on confidentiality, integrity, and availability. No remediation steps are provided in the supplied documents; explo...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

PT-2024-39841 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme spage version 1.9.5 Description: A critical issue was found in LyLme spage, affecting an unknown function of the file /admin/sou.php. The manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

PT-2024-39840 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme spage version 1.9.5 Description: A critical issue affects the processing of the file /admin/apply.php. The manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: For LyLme spage...

PT-2024-27118 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme spage version 1.9.5 Description: The issue concerns Server-Side Request Forgery SSRF via the get head function. This allows for potential unauthorized access to internal resources. Recommendations: For LyLme spage version 1.9.5, conside...

PT-2024-27117 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme spage version 1.9.5 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the admin/link.php endpoint. This means an attacker could potentially inject malicious scripts into the website, affecting users...