EDB-15060
functionalLightNEasy CMS 3.2.1 - Blind SQL Injection
view exploit source exploit_dbverifiedtype webappsauthor Solidmediapublished 2010-09-20catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-4752US | medium6.8 | Exploit | ||
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page paramet… | ||||
| CVE-2010-4751US | medium6.0 | Exploit | ||
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id… | ||||
| CVE-2010-3485US | high7.5 | Exploit | ||
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vec… | ||||
| CVE-2010-3484US | high7.5 | Exploit | ||
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vect… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan