← Database

CVE-2008-6591

MEDIUM CVSS: 5.0 Published: 2009-04-03 Modified: 2026-06-16

Description

LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.

Affected Platforms

Lightneasy Lightneasy

Weakness Type

CWE-94

References