Vendor archive

lkw199711 CVEs

Beta · best-effort

3 CVEs tagged to vendor lkw199711 — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2025-70833

Published Feb 20, 2026

An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the ac…

CVSS 9.4 · Critical

Vendor/product tagsBeta · best-effort

CVE-2025-70831

Published Feb 20, 2026

A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-34193

Published May 20, 2024

smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1