PT-2011-1701 · Lightneasy · Lightneasy

Publicado 2011-03-01 · Atualizado 2017-08-17 · CVE-2010-4751

NVD

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic quotes gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-4751

Produtos afetados

Lightneasy

Referências · 8

• 🔥 https://exploit-db.com/exploits/15060 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4751 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4751 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63723 · Nota
• http://secunia.com/advisories/42391 · Aviso do Fabricante
• http://securityfocus.com/bid/45230 · Nota
• http://lightneasy.org/punbb/viewtopic.php?id=1207 · Nota
• http://holisticinfosec.org/content/view/168/45 · Nota