Description (CNA)
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/11180
- http://www.osvdb.org/4497
- http://www.securityfocus.com/bid/9935
- http://securitytracker.com/id?1009507
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15549
- http://www.osvdb.org/4495
- http://marc.info/?l=bugtraq&m=107999733503496&w=2
- http://www.osvdb.org/4496
ADP enrichment
No English description supplied.