CVE-2008-6593

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Link	Resource
http://secunia.com/advisories/29833	Vendor Advisory
http://www.osvdb.org/44675	Exploit
http://www.securityfocus.com/bid/28801
https://exchange.xforce.ibmcloud.com/vulnerabilities/42009
https://www.exploit-db.com/exploits/5452
http://www.securityfocus.com/archive/1/491064/100/0/threaded

Configuration 1

cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:* cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*

---

Published : 2009-04-03 06:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6593

Mitre link : CVE-2008-6593

No products.

CWE-89