CVE-2008-6592 thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal s...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightneasy | = 1.2.2 | No fix listed |
| SQLite | = 1.2.2 | No fix listed |
References
- 29833 third-party-advisory vendor-advisory
- 44674 exploit vdb-entry
- 20080418 LightNEasy v.1.2.2 flat Multiple Vulnerabilities mailing-list
- 28801 vdb-entry
- lightneasy-thumbsup-file-manipulation(49851) vdb-entry
- 5452 exploit