Browse all 4 CVE security advisories affecting FantasticLBP. AI-powered Chinese analysis, POCs, and references for each vulnerability.
FantasticLBP is a web application platform primarily used for content management and online community building. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, as evidenced by its four recorded CVEs. The platform's security characteristics include regular updates addressing critical vulnerabilities, though its complex architecture continues to present attack surfaces. No major public security incidents have been documented, but the consistent pattern of vulnerabilities suggests ongoing challenges in secure coding practices, particularly in input validation and access control mechanisms.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-15127 | FantasticLBP Hotels_Server Room.php sql injection — Hotels_ServerCWE-89 | 7.3 | High | 2025-12-28 |
| CVE-2025-14711 | FantasticLBP Hotels Server hotelList.php sql injection — Hotels ServerCWE-89 | 7.3 | High | 2025-12-15 |
| CVE-2025-14710 | FantasticLBP Hotels Server OrderList.php sql injection — Hotels ServerCWE-89 | 7.3 | High | 2025-12-15 |
| CVE-2025-13208 | FantasticLBP Hotels Server hotelList.php sql injection — Hotels ServerCWE-89 | 6.3 | Medium | 2025-11-15 |
This page lists every published CVE security advisory associated with FantasticLBP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.