CVE-2008-6591 LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightneasy | = 1.2.2 | No fix listed |
References
- 44678 vdb-entry
- 44679 vdb-entry
- 29833 third-party-advisory vendor-advisory
- 20080418 LightNEasy v.1.2.2 flat Multiple Vulnerabilities mailing-list
- 28839 exploit vdb-entry