CVE-2025-4543

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-4543

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4543.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-4543

Published

2025-05-11T18:00:06.134Z

Modified

2026-07-15T01:49:07.128908159Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

LyLme Spage ajax_link.php sql injection

Details

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylmespage/blob/master/admin/ajaxlink.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4543.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.1"
                },
                {
                    "last_affected": "2.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/lylme/lylme_spage

Affected ranges

Type

GIT

Repo

https://github.com/lylme/lylme_spage

Events

Introduced

ae11c514e0eb2a15fbcabcd13603fa9841c6f810

Last affected

ae11c514e0eb2a15fbcabcd13603fa9841c6f810

Database specific

{
    "cpe": "cpe:2.3:a:lylme:lylme_spage:2.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*

2.1.0

v2.*

v2.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4543.json"