← Database

CVE-2008-6593

HIGH CVSS: 7.5 Published: 2009-04-03 Modified: 2026-06-16

Description

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Affected Platforms

Sqlite SqliteLightneasy Lightneasy

Weakness Type

CWE-89

References