CVE-2024-9790

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-9790

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9790.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-9790

Published

2024-10-10T15:00:10.697Z

Modified

2026-07-15T01:48:59.751878553Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

LyLme_spage sou.php sql injection

Details

A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9790.json",
    "cwe_ids": [
        "CWE-89"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.9.5"
                },
                {
                    "last_affected": "1.9.5"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/lylme/lylme_spage

Affected ranges

Type

GIT

Repo

https://github.com/lylme/lylme_spage

Events

Introduced

b7c430a49e8b247ddb04401b1176157c10d52948

Last affected

b7c430a49e8b247ddb04401b1176157c10d52948

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.9.5"
        },
        {
            "last_affected": "1.9.5"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:lylme:lylme_spage:1.9.5:*:*:*:*:*:*:*"
}

Affected versions

1.*

1.9.5

v1.*

v1.9.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9790.json"