Lemon S Php develops a portfolio of lightweight bulletin-board and image-sharing applications written in PHP, including Gazou BBS Plus, Simple Oekaki, and Twit BBS, which serve niche communities with modest deployment footprints. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Lemon S Php over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-2970MEDIUM index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter. | Jul 10, 2015 | 6.4 | 21 | NO | NO |
CVE-2015-2974MEDIUM LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file. | Jul 29, 2015 | 5.0 | 15 | NO | NO |
CVE-2015-2989MEDIUM Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter. | Sep 7, 2015 | 4.3 | 14 | NO | NO |
CVE-2015-2969MEDIUM Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis pa | Jul 10, 2015 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Lemon S Php.
Media articles that mention a CVE ID that affects a product developed by Lemon S Php — matched by CVE ID, not by vendor name.