Unscored CVE-2008-6591 EUVD-2008-6554GHSA-hqxm-hj8w-47m4

LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via…

Published Apr 3, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.

References

20080418 LightNEasy v.1.2.2 flat Multiple Vulnerabilities mailing-list
44678 vdb-entry
29833 third-party-advisory
44679 vdb-entry
28839 vdb-entry