Description

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Remediation

References

CVE-2008-6593

Related Vulnerabilities

WordPress Plugin Custom Website Data Cross-Site Scripting (2.2)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)

Claroline Other Vulnerability (CVE-2007-3517)

ownCloud Improper Access Control Vulnerability (CVE-2016-9462)

Roundcube Improper Input Validation Vulnerability (CVE-2011-1491)

Severity

High

Classification

CVE-2008-6593 CWE-138

Tags

Missing Update Known Vulnerabilities