LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-03T18:00:00

Updated: 2024-08-07T11:34:47.066Z

Reserved: 2009-04-03T00:00:00

Link: CVE-2008-6591

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-04-03T18:30:00.360

Modified: 2024-11-21T00:56:56.197

Link: CVE-2008-6591

cve-icon Redhat

No data.