EDB-5452
functionalLightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities
view exploit source exploit_dbverifiedtype webappsauthor girexpublished 2008-04-15catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-6593US | high7.5 | Exploit | ||
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid… | ||||
| CVE-2008-6592US | high7.5 | Exploit | ||
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via d… | ||||
| CVE-2008-6590US | medium5.0 | Exploit | ||
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan