Description

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Remediation

References

CVE-2008-6593

Related Vulnerabilities

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.14)

Liferay Portal Missing Authorization Vulnerability (CVE-2023-33948)

MediaWiki Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-2243)

WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12528)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2008-6593