CVE-2008-6589 | BDVDB-2026-35902 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/491064/100/0/threaded
http://secunia.com/advisories/29833
http://www.osvdb.org/44676
https://exchange.xforce.ibmcloud.com/vulnerabilities/41888
http://www.osvdb.org/44677
http://www.securityfocus.com/bid/28839

Exploit#

No public exploit known

History#

Version 12009-04-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.