Lucene search

K
cve[email protected]CVE-2010-3484
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3484

2022-10-0316:20:57
CWE-89
web.nvd.nist.gov
22
cve-2010-3484
sql injection
lightneasy 3.2.1
remote attack
arbitrary commands

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593.

Affected configurations

NVD
Node
lightneasylightneasyMatch3.2.1
CPENameOperatorVersion
lightneasy:lightneasylightneasyeq3.2.1

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%