CVE-2008-6593 in LightNEasy

Summary

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 04/03/2009
• Disclosure: 04/03/2009
• Moderation: VulDB entry created
• Entries: VDB-47507 (1)
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.00416
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6593
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6593
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6593/