CVE-2008-2340

2008-05-1910:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.1%

JSON

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and © index.php, and the (2) pid parameter to (d) list_tagitems.php.