Login Request a demo
LV
Product
Lvyecms
by Lvyecms Project · last CVE Nov 20, 2017
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lvyecms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-16903
9.8
2%
Nov 20
LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the…
Affected: through 3.1
CVE-2017-16904
6.1
1%
Nov 20
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator
Affected: through 3.1
Showing 2