CVE-2008-6589

Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php.

Link	Resource
http://www.osvdb.org/44677	Exploit
http://secunia.com/advisories/29833	Vendor Advisory
http://www.osvdb.org/44676	Exploit
http://www.securityfocus.com/bid/28839
https://exchange.xforce.ibmcloud.com/vulnerabilities/41888
http://www.securityfocus.com/archive/1/491064/100/0/threaded

Configuration 1

cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:* cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*

---

Published : 2009-04-03 06:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6589

Mitre link : CVE-2008-6589

No products.

CWE-79