CVE-2024-9789

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-9789

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9789.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-9789

Published

2024-10-10T14:00:12.666Z

Modified

2026-08-12T03:51:45.744534058Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

LyLme_spage apply.php sql injection

Details

A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9789.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.9.5"
                },
                {
                    "last_affected": "1.9.5"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/lylme/lylme_spage

Affected ranges

Type

GIT

Repo

https://github.com/lylme/lylme_spage

Events

Introduced

b7c430a49e8b247ddb04401b1176157c10d52948

Last affected

b7c430a49e8b247ddb04401b1176157c10d52948

Database specific

Show details

{
    "cpe": "cpe:2.3:a:lylme:lylme_spage:1.9.5:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.9.5"
        },
        {
            "last_affected": "1.9.5"
        }
    ]
}

Affected versions

1.*

1.9.5

v1.*

v1.9.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9789.json"