CVE-2008-6593
LightNEasy SQLite <= 1.2.2 - SQL Injection via dlid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6593. PoCs published by girex.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in LightNEasy CMS <= 1.2.2, including remote file disclosure, arbitrary file copy/rename, remote command execution via PHP injection, and SQL injection. The PoC provides clear steps and endpoints for exploitation.
Description
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in LightNEasy CMS <= 1.2.2, including remote file disclosure, arbitrary file copy/rename, remote command execution via PHP injection, and SQL injection. The PoC provides clear steps and endpoints for exploitation.