Lmxcms

11 CVEs across 1 Lmxcms products. Browse Lmxcms vulnerabilities, severities, and proof-of-concept exploits.

Lmxcms products with known CVEs

ProductCVEs
Lmxcms11
Lmxcms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-4541Medium6.32025-05-11A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component…
CVE-2025-1465Medium4.12025-02-19A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Mainten…
CVE-2024-8523Medium4.72024-09-07A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatData of the file /admin.php?m=Acquisi&a=…
CVE-2021-35437Critical9.82023-11-16SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.
CVE-2023-46958Critical9.82023-11-02An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
CVE-2023-5017Medium5.52023-09-17A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The…
CVE-2023-29598Critical9.82023-04-13lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.
CVE-2023-1322Medium6.32023-03-10A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipul…
CVE-2023-1321Medium6.32023-03-10A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class…
CVE-2023-23136Medium6.52023-02-01lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.
CVE-2022-48094Medium4.92023-02-01lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.