Lucene search

K
exploitpackManuel LopezEXPLOITPACK:5433C247807503AE36595C75489B58CB
HistoryMar 20, 2004 - 12:00 a.m.

Expinion.net News Manager Lite 2.5 - category_news_headline.asp Cross-Site Scripting

2004-03-2000:00:00
Manuel Lopez
4

Expinion.net News Manager Lite 2.5 - category_news_headline.asp Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info
  
Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks.
  
The issues exist in the 'comment_add.asp', 'search.asp', 'category_news_headline.asp', 'more.asp', 'category_news.asp', and 'ews_sort.asp' scripts. Further more a cookie account hijacking issue was also discovered in the application that may allow a remote attacker to gain administrative access to application's administrative interface.
  
News Manager Lite 2.5 is reported to be affected by these issues, however, other versions may be affected as well.

http://www.example.com/category_news_headline.asp?ID=2&n=[XSS]