PT-2011-1701 · Lightneasy · Lightneasy

Published 2011-03-01 · Updated 2017-08-17 · CVE-2010-4751

NVD

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic quotes gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2010-4751

Affected Products

Lightneasy

References · 8

• 🔥 https://exploit-db.com/exploits/15060 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4751 · Security Note
• http://secunia.com/advisories/42391 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4751 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63723 · Note
• http://securityfocus.com/bid/45230 · Note
• http://lightneasy.org/punbb/viewtopic.php?id=1207 · Note
• http://holisticinfosec.org/content/view/168/45 · Note