LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-04-03 18:30
Updated : 2024-02-28 11:21
NVD link : CVE-2008-6591
Mitre link : CVE-2008-6591
CVE.ORG link : CVE-2008-6591
JSON object : View
Products Affected
lightneasy
- lightneasy
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')