CVE-2008-6589 Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HT...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightneasy | = 1.2.2 | No fix listed |
| SQLite | = 1.2.2 | No fix listed |
References
- 29833 third-party-advisory vendor-advisory
- 44676 exploit vdb-entry
- 44677 exploit vdb-entry
- 20080418 LightNEasy v.1.2.2 flat Multiple Vulnerabilities mailing-list
- 28839 vdb-entry
- lightneasy-page-xss(41888) vdb-entry