CVE-2010-3485: SQL Injection

Published Sep 22, 2010

Updated

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

LightNEasy LightNEasy=3.2.1

Event History

Sep 22, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3485?

CVE-2010-3485 is considered a high severity vulnerability due to its potential for remote SQL code execution.

How do I fix CVE-2010-3485?

To fix CVE-2010-3485, upgrade LightNEasy to the latest version that addresses this SQL injection vulnerability.

What type of vulnerability is CVE-2010-3485?

CVE-2010-3485 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.

What is affected by CVE-2010-3485?

CVE-2010-3485 affects LightNEasy version 3.2.1, specifically in the common.php file.

How are attackers exploiting CVE-2010-3485?

Attackers exploit CVE-2010-3485 by manipulating the userhandle cookie sent to LightNEasy.php to execute unauthorized SQL commands.