LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-04-03 11:30
Updated : 2018-10-11 13:57
NVD link : CVE-2008-6591
Mitre link : CVE-2008-6591
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
lightneasy
- lightneasy