Security Advisory
CVE-2008-6593
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.