Description

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Remediation

References

CVE-2008-6593

Related Vulnerabilities

PHP Other Vulnerability (CVE-2021-21707)

Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-5373)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)

Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-8446)

Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3195)

Severity

High

Classification

CVE-2008-6593 CWE-138

Tags

Missing Update Known Vulnerabilities