Lightneasy
13 CVEs across 1 Lightneasy products. Browse Lightneasy vulnerabilities, severities, and proof-of-concept exploits.
Lightneasy products with known CVEs
Lightneasy CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2011-3978 | | | 2011-10-04 | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HT… |
CVE-2010-4753 | | | 2011-03-01 | Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parame… |
CVE-2010-4752 | | | 2011-03-01 | SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands… |
CVE-2010-4751 | | | 2011-03-01 | SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQ… |
CVE-2010-3485 | | | 2010-09-22 | SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy… |
CVE-2010-3484 | | | 2010-09-22 | SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy… |
CVE-2009-1937 | | | 2009-06-05 | Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and 2.2.2 SQLite allows remote attackers t… |
CVE-2008-6593 | | | 2009-04-03 | SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comme… |
CVE-2008-6592 | | | 2009-04-03 | thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read… |
CVE-2008-6591 | | | 2009-04-03 | LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter… |
CVE-2008-6590 | | | 2009-04-03 | Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to… |
CVE-2008-6589 | | | 2009-04-03 | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attac… |
CVE-2008-6537 | | | 2009-03-30 | LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" act… |