CVE-2010-3485

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

Sql injection

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593...

Sql injection

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2010-3485

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2010-3485

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2010-3485

CVE-2010-3485 affects LightNEasy 3.2.1. The vulnerability lies in LightNEasy.php, where an attacker can send an arbitrary SQL command through the userhandle cookie, enabling remote arbitrary SQL execution. This is a distinct vector from CVE-2008-6593. Red Hat entries corroborate the same vulnerab...

CVE-2010-3484

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593...

CVE-2010-3485

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2010-3484

LightNEasy 3.2.1 is affected by an SQL injection via the handle parameter to LightNEasy.php in common.php, enabling remote attackers to execute arbitrary SQL commands. This vulnerability is documented as CVE-2010-3484, with the root cause being improper input handling in LightNEasy.php (different...

CVE-2010-3484

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593...

VWD-CMS CSRF Vulnerability

Exploit for asp platform in category web applications ========================== VWD-CMS CSRF Vulnerability ========================== Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website:...

LightNEasy 'LightNEasy.php' SQL Injection Vulnerability

LightNEasy is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

LightNEasy 3.2 admin account hijacking csrf vulnerability

Exploit for php platform in category web applications ========================================================= LightNEasy 3.2 admin account hijacking csrf vulnerability ========================================================= Author: pimpim Software Link:...

Multiple Vulnerabilities in LightNEasy CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LightNEasy CMS which could be exploited to perform script insertion, cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in LightNEasy CMS 1.1 The vulnerability...

LightNEasy 3.1.x - Multiple Vulnerabilities

Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability46.htm...

LightNEasy 3.1.x Multiple Vulnerabilite

Exploit for php platform in category web applications ======================================= LightNEasy 3.1.x Multiple Vulnerabilite ======================================= Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR:...

Cross-Site Scripting Vulnerability in LightNEasy

This host is running LightNEasy and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodlightneasyxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Cross-Site Scripting Vulnerability in LightNEasy Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== LightNEasy sql/no-db new...

LightNEasy sql/no-db 2.2.x - System Configuration Disclosure

!/usr/bin/perl LightNEasy sql/no-db new PeerAddr = $host, PeerPort = 80, Proto = 'tcp', || die $!; $data .= "GET /$path/LightNEasy.php?page=$page%00 HTTP/1.1\r\n"; $data .= "Host: $host\r...

LightNEasy sql/no-db 2.2.x Configuration Disclosure

!/usr/bin/perl LightNEasy sql/no-db new PeerAddr = $host, PeerPort = 80, Proto = 'tcp', || die $!; $data .= "GET /$path/LightNEasy.php?page=$page%00 HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "User-Agent: Lynx textmode\r\n"; $data .= "Connection: close\r\n\r\n";...