CVE-2010-4752: SQL Injection

Published Mar 1, 2011

Updated

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

LightNEasy LightNEasy=3.2.1

Event History

Mar 1, 2011

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4752?

CVE-2010-4752 is considered a high severity SQL injection vulnerability.

How do I fix CVE-2010-4752?

To fix CVE-2010-4752, you should disable magic_quotes_gpc and implement proper input validation and prepared statements in your SQL queries.

What causes CVE-2010-4752?

CVE-2010-4752 is caused by insufficient sanitization of user input in the page parameter within the LightNEasy application.

Who is affected by CVE-2010-4752?

Only users of LightNEasy version 3.2.1 with magic_quotes_gpc disabled are affected by CVE-2010-4752.

What type of attacks can occur due to CVE-2010-4752?

CVE-2010-4752 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.