Skip to content
OpenAdvisories
Critical · 9.8 Scanner template CVE-2024-34982 EUVD-2024-35135GHSA-c4mm-9h9f-6xf6

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code …

Published May 17, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References