CVE-2008-6537 LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared f...
MediumCVSS 5.0
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $_GET but later accessed using $_REQUEST.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightneasy | = 1.2 | No fix listed |
References
- 44397 vdb-entry
- 29757 third-party-advisory vendor-advisory
- lightneasy-lightneasy-info-disclosure(41768) vdb-entry
- 5425 exploit