VDB

CVE-2008-6590

CVE-2008-6590 PUBLISHED CVSS 5 MEDIUM

Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php.

EPSS 3.74% · 88.2th percentile

Risk Scores

CVSS 2.0
5
EPSS Score
3.74%
88.2th percentile

Affected Products

VendorProductVersions
lightneasylightneasy1.2.2
n/an/an/a
sqlitesqlite1.2.2

Timeline

  • Apr 15, 2008 PoC Published
  • Apr 3, 2009 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 25, 2023 EPSS Score

References

…and 2 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›