CVE-2015-2970: Lemon-S PHP Simple Oekaki

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter.

Affected products

• Lemon-S PHP Simple Oekaki: up to and including 1.2

Published 2015-07-10. Last modified 2026-06-17.