VendorsExpinion.netnews_manager_liteall versions
Vulnerabilities

Expinion.net News Manager Lite

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2004-1847
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.
Published 2005-05-10 · Modified
7.51 PoCEPSS 0.029
CVE-2004-1846
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
Published 2005-05-10 · Modified
7.53 PoCEPSS 0.017
CVE-2004-1845
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
Published 2005-05-10 · Modified
4.33 PoCEPSS 0.022