CVE-2010-4751: SQL Injection
Published Mar 1, 2011
·Updated
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.
Affected Software
1 affected component
LightNEasy LightNEasy=3.2.1
Event History
Mar 1, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4751?
CVE-2010-4751 has a medium severity level due to its potential for allowing SQL injection attacks.
2
How do I fix CVE-2010-4751?
To fix CVE-2010-4751, it is recommended to update LightNEasy to a version that has addressed this SQL injection vulnerability.
3
Who is affected by CVE-2010-4751?
CVE-2010-4751 affects users of LightNEasy version 3.2.1 when magic_quotes_gpc is disabled.
4
What type of vulnerability is CVE-2010-4751?
CVE-2010-4751 is classified as an SQL injection vulnerability.
5
Can CVE-2010-4751 be exploited by unauthenticated users?
No, CVE-2010-4751 can only be exploited by remote authenticated users.