CVE-2008-6593: Lightneasy

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.

Affected products

• Lightneasy Lightneasy: version 1.2.2 only
• Sqlite Sqlite: version 1.2.2 only

Published 2009-04-03. Last modified 2026-06-16.