Layerbb vulnerabilities

Products

• Layerbb 8

Newest

• layerbb LayerBB 1.1.4 SQL Injection via search_query Parameter CVE-2021-47954 8.8 HighMay 16, 2026
• layerbb LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings... CVE-2019-16531 Public exploit 8.8 HighSeptember 20, 2019
• layerbb LayerBB 1.1.3 allows conversations.php/cmd/new CSRF. CVE-2019-13974 8.8 HighJuly 19, 2019
• layerbb LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename... CVE-2019-13973 9.8 CriticalJuly 19, 2019
• layerbb LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue... CVE-2019-13972 6.1 MediumJuly 19, 2019
• layerbb LayerBB 1.1.1 allows XSS via the titles of conversations (PMs). CVE-2018-17997 Public exploit 6.1 MediumMarch 17, 2019
• layerbb LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via... CVE-2018-17996 Public exploit 6.5 MediumMarch 17, 2019
• layerbb LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter. CVE-2018-17988 9.8 CriticalMarch 7, 2019