Riskcovery

CVE-2023-5017

lmxcms admin.php sql injection

State
Published
Severity
5.5 Medium
Published
Sep 17, 2023
Updated
Aug 2, 2024
Reserved
Sep 16, 2023

Read the record on cve.org

Description

A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LVulDB
3.05.5 MediumCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LVulDB
2.05.2 MediumAV:A/AC:L/Au:S/C:P/I:P/A:PVulDB

Weaknesses

Affected Products

ProductVersions
lmxcmsn/a
  • 1.0Affected
  • 1.1Affected
  • 1.2Affected
  • 1.3Affected
  • 1.4Affected
  • 1.5Affected
  • 1.6Affected
  • 1.7Affected
  • 1.8Affected
  • 1.9Affected
  • 1.10Affected
  • 1.11Affected
  • 1.12Affected
  • 1.13Affected
  • 1.14Affected
  • 1.15Affected
  • 1.16Affected
  • 1.17Affected
  • 1.18Affected
  • 1.19Affected
  • 1.20Affected
  • 1.21Affected
  • 1.22Affected
  • 1.23Affected
  • 1.24Affected
  • and 17 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.