Description (CNA)
LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/491064/100/0/threaded
- http://osvdb.org/44678
- http://secunia.com/advisories/29833
- http://osvdb.org/44679
- http://www.securityfocus.com/bid/28839
ADP enrichment
No English description supplied.