Sql injection

2008-05-1913:20:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.1%

JSON

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and © index.php, and the (2) pid parameter to (d) list_tagitems.php.

CPENameOperatorVersion
news_managereq2.0

CPE	Name	Operator	Version
	news_manager	eq	2.0

References

www.securityfocus.com/bid/29251

exchange.xforce.ibmcloud.com/vulnerabilities/42461

www.exploit-db.com/exploits/5624