Skip to main content

Lmxcms

9 CVEs product

Monthly

CVE-2025-4541 May 11, 16:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in LmxCMS 1.41. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Lmxcms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-1465 Feb 19, 16:15 LOW POC Monitor

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Lmxcms
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.2%
CVE-2024-8523 Sep 07, 09:15 MEDIUM POC This Month

A vulnerability was found in lmxcms up to 1.4 and classified as critical. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Lmxcms
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
1.0%
CVE-2023-46958 Nov 02, 22:15 CRITICAL Act Now

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Code Injection Lmxcms
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.3%
CVE-2023-5017 Sep 17, 03:15 CRITICAL Act Now

A vulnerability was found in lmxcms up to 1.41. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
CVSS 3.1
9.8
EPSS
0.4%
CVE-2023-29598 Apr 13, 14:15 CRITICAL POC Act Now

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Lmxcms
NVD GitHub
CVSS 3.1
9.8
EPSS
0.7%
CVE-2023-1322 Mar 10, 16:15 CRITICAL Act Now

A vulnerability was found in lmxcms 1.41 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2023-1321 Mar 10, 16:15 CRITICAL Act Now

A vulnerability has been found in lmxcms 1.41 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2023-23136 Feb 01, 16:15 MEDIUM POC This Month

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Lmxcms
NVD
CVSS 3.1
6.5
EPSS
0.8%
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in LmxCMS 1.41. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Lmxcms
NVD GitHub VulDB
EPSS 0% CVSS 2.1
LOW POC Monitor

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Lmxcms
NVD GitHub VulDB
EPSS 1% CVSS 5.1
MEDIUM POC This Month

A vulnerability was found in lmxcms up to 1.4 and classified as critical. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection +1
NVD GitHub VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Code Injection +1
NVD GitHub VulDB
EPSS 0% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in lmxcms up to 1.41. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Lmxcms
NVD GitHub
EPSS 0% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in lmxcms 1.41 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
EPSS 0% CVSS 9.8
CRITICAL Act Now

A vulnerability has been found in lmxcms 1.41 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Lmxcms
NVD VulDB
EPSS 1% CVSS 6.5
MEDIUM POC This Month

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Lmxcms
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy