CVE-2008-6537

LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do"…

published March 30, 2009

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared from $_GET but later accessed using $_REQUEST.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06272 · 93.5th percentile
Published
2009-03-30T01:00Z
EPSS history
Timeline
  • 30 MAR 01:00Z
    LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do"…
    cvelistv5