← All advisories

Critical severity9.8NVD Advisory· Published Oct 28, 2024· Updated Jun 17, 2026

CVE-2024-48356

CVE-2024-48356

Description

LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.

Affected products

3

Lylme/Spagellm-fuzzy2 versions
<=1.6.0+ 1 more
- (no CPE)range: <=1.6.0
- (no CPE)
Lylme/Lylme Spage
cpe:2.3:a:lylme:lylme_spage:*:*:*:*:*:*:*:*
Range: <=1.6.0

Patches

Vulnerability mechanics

References

1

github.com/Jingyi-u/LyLme_Spage/blob/main/README.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.