Lucene search
HistoryApr 03, 2009 - 6:30 p.m.
CVE-2008-6593
cve-2008-6593
sql injection
lightneasy
vulnerability
remote attackers
php code
comments.dat
index.php
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.
Affected configurations
Node
lightneasylightneasyMatch1.2.2no_database
ORsqlitesqliteMatch1.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| lightneasy:lightneasy | lightneasy | eq | 1.2.2 |
| sqlite:sqlite | sqlite | eq | 1.2.2 |
Related
nvd
nvd
prion
prion
cvelist
cvelist
cve
cve
ubuntucve
ubuntucve
CVE-2010-3484
2010-09-22 00:00:00
CVE-2010-3485
2010-09-22 00:00:00
debiancve
debiancve
CVE-2010-3485
2022-10-03 16:20:55
CVE-2010-3484
2022-10-03 16:20:57
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2008-6593