Unscored severity · published Apr 3, 2009
CVE-2008-6591
LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and…
–
CVSS
1.3%
EPSS
No
On KEV
Description
LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Lightneasy · Lightneasy
1.2.2; 1.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6591
osvdb.org
http://osvdb.org/44678
osvdb.org
http://osvdb.org/44679
Vendor Advisory
http://secunia.com/advisories/29833
www.securityfocus.com
http://www.securityfocus.com/archive/1/491064/100/0/threaded
Exploit
http://www.securityfocus.com/bid/28839
More from Lightneasy
–
CVE-2011-3978
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1)…
–
CVE-2010-4753
Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not…
–
CVE-2010-4752
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page…
–
CVE-2010-4751
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the…
–
CVE-2010-3485
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different…