Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Lylme

First CVE: Oct 17, 2023Active for: 3 yearsTotal CVEs: 12
54.0
VTI Score
TOP TARGET

Lylme's vulnerability footprint centers on a single web-based document-sharing product, Spage, that sits at a moderate level of prominence in the landscape. The vendor's disclosures skew strongly toward critical-severity outcomes and frequently acquire public exploit code, driven by recurring application-layer input-handling weaknesses—SQL injection, cross-site scripting, unrestricted file upload, and related injection flaws—alongside authorization bypass conditions that are common in web platforms lacking mature input-validation and access-control architecture. Defenders treating this vendor should monitor patches and treat exposed instances as high-priority given the severity tendency and exploit availability; live exploitation status and exposure counts are shown alongside this summary.

FAUCET AI Generated
12
Total CVEs
More Total CVEs than 93% of tracked vendors
4.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 95% of tracked vendors
8.6
Avg CVSS Score
Higher Avg CVSS Score than 82% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Lylme over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 17, 2023
2 years ago
Most Recent CVE
May 11, 2025
439 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-34982CRITICAL
An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file.
May 17, 20249.839NOYES
CVE-2024-36675CRITICAL
LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
Jun 4, 20249.135NOYES
CVE-2023-45951CRITICAL
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
Oct 17, 20239.829NONO
CVE-2024-48176CRITICAL
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed logi
Nov 5, 20249.826NONO
CVE-2023-45952CRITICAL
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.
Oct 17, 20239.826NONO
CVE-2024-48356CRITICAL
LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.
Oct 28, 20249.825NONO
CVE-2024-48357CRITICAL
LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.
Oct 28, 20249.825NONO
CVE-2024-9790HIGH
A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id
Oct 10, 20247.221NONO
CVE-2024-9789HIGH
A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument
Oct 10, 20247.221NONO
CVE-2024-9788HIGH
A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument
Oct 10, 20247.221NONO
View all 12 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products12 CVEs
8%
33%
58%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network12 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (91.7%)
Unknown0 (0.0%)
Required1 (8.3%)
Privileges Required
Low0 (0.0%)
High3 (25.0%)
None9 (75.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (12 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
16.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Lylme.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Lylme — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Lylme's Products

View all 2 CNAs →

Top CWEs