LA
Vendor
LayerBB
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-47954 | LA LayerBB LayerBB | 8.2 | May 16 | LayerBB 1.1.4 SQL Injection via search_query Parameter |
| CVE-2019-16531 | LA Layerbb Layerbb | 8.8 | Sep 20 | LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php |
| CVE-2019-13974 | LA Layerbb Layerbb | 8.8 | Jul 19 | LayerBB 1.1.3 allows conversations.php/cmd/new CSRF |
| CVE-2019-13973 | LA Layerbb Layerbb | 9.8 | Jul 19 | LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used |
| CVE-2019-13972 | LA Layerbb Layerbb | 6.1 | Jul 19 | LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997 |
| CVE-2018-17997 | LA Layerbb Layerbb | 6.1 | Mar 17 | LayerBB 1.1.1 allows XSS via the titles of conversations (PMs) |
| CVE-2018-17996 | LA Layerbb Layerbb | 6.5 | Mar 17 | LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/ |
| CVE-2018-17988 | LA Layerbb Layerbb | 9.8 | Mar 7 | LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter |