Vulnerabilities (CVE)

Filtered by vendor Layerbb Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-17988 1 Layerbb 1 Layerbb 2021-08-20 7.5 HIGH 9.8 CRITICAL
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.
CVE-2019-13973 1 Layerbb 1 Layerbb 2019-07-19 7.5 HIGH 9.8 CRITICAL
LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used.