Lucene search

Lylme Spage Security Vulnerabilities - 2023

cve

CVE-2023-45951

lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.

9.8CVSS

9.8AI Score

0.001EPSS

2023-10-17 08:15 PM

cve

CVE-2023-45952

An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.

9.8CVSS

9.6AI Score

0.002EPSS

2023-10-17 08:15 PM