GCVE - cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

Vendor	Sqlite (`2fa54148-3330-55ea-bc07-9c259c66b82f`)
Product	Sqlite (`1c2c6e01-e158-5c50-a8e5-ac18a10b3bdd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/sqlite`	purl2cpe	2026-06-01 10:16:53.064247
`pkg:deb/ubuntu/sqlite`	purl2cpe	2026-06-01 10:16:53.064249
`pkg:github/sqlite/sqlite`	purl2cpe	2026-06-01 10:16:53.064251

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6593`	vulnerable	2026-06-08 04:50:55.475273	Details available SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php. Published: 2009-04-03T18:00:00.000Z Updated: 2024-08-07T11:34:47.184Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28801 http://www.securityfocus.com/archive/1/491064/100/0/threaded http://www.osvdb.org/44675 http://secunia.com/advisories/29833 https://www.exploit-db.com/exploits/5452	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6592`	vulnerable	2026-06-08 04:50:55.474906	Details available thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte). Published: 2009-04-03T18:00:00.000Z Updated: 2024-08-07T11:34:47.076Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28801 http://www.securityfocus.com/archive/1/491064/100/0/threaded http://www.osvdb.org/44674 http://secunia.com/advisories/29833 https://www.exploit-db.com/exploits/5452	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6590`	vulnerable	2026-06-08 04:50:55.472517	Details available Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php. Published: 2009-04-03T18:00:00.000Z Updated: 2024-08-07T11:34:47.160Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/491064/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/41889 http://secunia.com/advisories/29833 http://www.osvdb.org/44673 http://www.osvdb.org/44672	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6589`	vulnerable	2026-06-08 04:50:55.472053	Details available Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php. Published: 2009-04-03T18:00:00.000Z Updated: 2024-08-07T11:34:47.173Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/491064/100/0/threaded http://secunia.com/advisories/29833 http://www.osvdb.org/44676 https://exchange.xforce.ibmcloud.com/vulnerabilities/41888 http://www.osvdb.org/44677	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.