CVE-2010-4751: SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allow...

Security readout for executives and security teams

CVE-2010-4751 is an SQL injection issue in LightNEasy 3.2.1. An authenticated remote user may be able to make the application run unintended database queries through the user-editing workflow when PHP magic_quotes_gpc is disabled. Business impact depends on whether this old CMS is still deployed and reachable. Likely exposure is limited to environments still running LightNEasy 3.2.1, with authenticated access to the edituser function and magic_quotes_gpc disabled. The source bundle does not provide CPEs, deployment prevalence, or a confirmed fixed version. Treat this as a targeted legacy-application risk. It is not supported by evidence of active exploitation, but SQL injection can affect data integrity and confidentiality. Prioritize if LightNEasy remains internet-facing or has many authenticated users. Mitigation focus: Inventory for LightNEasy 3.2.1 installations and remove unsupported instances where possible.; Check LightNEasy vendor guidance and linked advisories for any fixed release or workaround.; Restrict authenticated access to user-management functions to trusted administrators only..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.