CVE-2004-1846

Summary

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/11180
• http://www.osvdb.org/4497
• http://www.securityfocus.com/bid/9935
• http://securitytracker.com/id?1009507
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15549
• http://www.osvdb.org/4495
• http://marc.info/?l=bugtraq&m=107999733503496&w=2
• http://www.osvdb.org/4496

References

• http://secunia.com/advisories/11180
• http://www.osvdb.org/4497
• http://www.securityfocus.com/bid/9935
• http://securitytracker.com/id?1009507
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15549
• http://www.osvdb.org/4495
• http://marc.info/?l=bugtraq&m=107999733503496&w=2
• http://www.osvdb.org/4496

• ←Previous
• Next→