CVE-2008-6591

CVE-2008-6591 affects LightNEasy “no database” (flat) version 1.2.2 (and possibly SQLite 1.2.2). The vulnerability allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php. Connected docs confirm the affected software and the vulnerable para...

CVE-2008-6593

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php...

CVE-2008-6537

LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $GET but later accessed using $REQUEST...

CVE-2008-6537

CVE-2008-6537 affects LightNEasy (LightNEasy No database version 1.2) and stems from LightNEasy.php: the setup action “do” clears the parameter from $_GET but later reads via $_REQUEST, allowing remote attackers to obtain the administrator password hash. The vulnerability’s impact is partial conf...

LightNEasy v.1.2.2 flat Multiple Vulnerabilities

LightNEasy v.1.2.2 flat Multiple Vulnerabilities Author: Gerendi Sandor Attila Date: April 14, 2008 Package: LightNEasy Product homepage: http://lightneasy.uni.cc/ Versions Affected: v.1.2.2 Other versions may also be affected Severity: High 1. Cross-Site Scripting XSS: Input passed to "page" in...

lightnhard-multi.txt

LightNEasy v.1.2.2 flat Multiple Vulnerabilities Author: Gerendi Sandor Attila Date: April 14, 2008 Package: LightNEasy Product homepage: http://lightneasy.uni.cc/ Versions Affected: v.1.2.2 Other versions may also be affected Severity: High 1. Cross-Site Scripting XSS: Input passed to "page" in...

lightneasy-multi.txt

Author: GiReX mySite: girex.altervista.org Date: 14/04/08 CMS: LightNEasy SQLite / no database = 1.2.2 Site: lightneasy.org Advisory: Multiple Remote Vulnerabilities Need: magicquotesgpc = Off magicquotesgpc = On / Off for SQL Injections Bug 1: Remote File Disclosure Affected: SQLite / no databas...

LightNEasy SQLite / no database <= 1.2.2 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== LightNEasy SQLite / no database = 1.2.2 Multiple Remote Vulnerabilities ======================================================================== Author: GiReX Date:...

LightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities

Author: GiReX mySite: girex.altervista.org Date: 14/04/08 CMS: LightNEasy SQLite / no database = 1.2.2 Site: lightneasy.org Advisory: Multiple Remote Vulnerabilities Need: magicquotesgpc = Off magicquotesgpc = On / Off for SQL Injections Bug 1: Remote File Disclosure Affected: SQLite / no databas...

LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" &&...

lightneasy-hash.txt

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

LightNEasy 1.2 - no database Remote Hash Retrieve

LightNEasy 1.2 - no database Remote Hash Retrieve Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap"...

LightNEasy 1.2 - no database Remote Hash Retrieve

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit

Exploit for unknown platform in category web applications ========================================================= LightNEasy 1.2 no database Remote Hash Retrieve Exploit ========================================================= Author: GiReX Date: 10/04/08 CMS: LightNEasy 1.2 no database Site:...