medium5.0Public exploit code
CVE-2008-6590
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities2008-04-15 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightneasy | Lightneasy | Version 1.2.2 |
| Sqlite | Sqlite | Version 1.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29833
- http://www.osvdb.org/44672
- http://www.osvdb.org/44673
- http://www.securityfocus.com/archive/1/491064/100/0/threaded
- http://www.securityfocus.com/bid/28839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41889
- http://secunia.com/advisories/29833
- http://www.osvdb.org/44672
- http://www.osvdb.org/44673
- http://www.securityfocus.com/archive/1/491064/100/0/threaded
- http://www.securityfocus.com/bid/28839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41889