CVE-2008-6537

LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $GET but later accessed using $REQUEST...

CVE-2008-6537

CVE-2008-6537 affects LightNEasy (LightNEasy No database version 1.2) and stems from LightNEasy.php: the setup action “do” clears the parameter from $_GET but later reads via $_REQUEST, allowing remote attackers to obtain the administrator password hash. The vulnerability’s impact is partial conf...