CVE-2010-3484: SQL Injection

Published Sep 22, 2010

Updated

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593.

Affected Software

1 affected component

LightNEasy LightNEasy=3.2.1

Event History

Sep 22, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3484?

The severity of CVE-2010-3484 is classified as high due to the potential for remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2010-3484?

To fix CVE-2010-3484, you should update the vulnerable LightNEasy version to a patched release or apply proper input validation to the handle parameter.

Which versions of LightNEasy are affected by CVE-2010-3484?

CVE-2010-3484 specifically affects LightNEasy version 3.2.1.

What type of vulnerability is CVE-2010-3484?

CVE-2010-3484 is an SQL injection vulnerability that allows attackers to manipulate SQL queries.

Can CVE-2010-3484 be exploited by unauthenticated users?

Yes, CVE-2010-3484 can be exploited by unauthenticated users who can send requests to the affected LightNEasy application.