Unscored CVE-2008-6589 EUVD-2008-6552GHSA-5j8m-f4q8-6hvx

Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2…

Published Apr 3, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php.

References

20080418 LightNEasy v.1.2.2 flat Multiple Vulnerabilities mailing-list
29833 third-party-advisory
44676 vdb-entry
lightneasy-page-xss(41888) vdb-entry
44677 vdb-entry
28839 vdb-entry