LP
Vendor
Lvyecms Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-16904 | LV Lvyecms Lvyecms Project | 6.1 | Nov 20 | The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator |
| CVE-2017-16903 | LV Lvyecms Lvyecms Project | 9.8 | Nov 20 | LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the… |