LyLme vulnerabilities
We track 7 vulnerabilities in LyLme products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 11, 2025.
Latest LyLme vulnerabilities
- 7.3 High severity
Spage: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
lylme_spage: Incorrect Authorization
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the sy
- 7.2 High severity
LyLme_spage: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi
- 7.2 High severity
LyLme_spage: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha
- 7.2 High severity
LyLme_spage: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit ha
- 9.8 Critical severity
lylme_spage: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file.
- 9.8 Critical severity
Lylme Spage: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.