CVE-2010-3485

CVE-2010-3485 describes a SQL injection vulnerability in LightNEasy CMS version 3.2.1, specifically within the common.php file. This flaw allows remote attackers to execute arbitrary SQL commands by manipulating the "userhandle" cookie when accessing LightNEasy.php. The vulnerability carries a CVSS score of 7.5, indicating high severity, as it can be exploited remotely with low complexity and without authentication, potentially leading to compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code for a blind SQL injection exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion surrounding this decade-old vulnerability.