PT-2011-1701

CVE-2010-4751

·

Published

2011-03-01

·

Updated

2017-08-17

Description by

CVSS 2.0
6.0
Medium
MetricsAV:N/AC:M/Au:S/C:P/I:P/A:P
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic quotes gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2010-4751
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com