Expinion.net News Manager Lite 2.5 category_news_headline.asp XSS

No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...

Expinion.net News Manager Lite 2.5 comment_add.asp XSS

No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...

Expinion.net News Manager Lite 2.5 news_sort.asp filter Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...

Expinion.net News Manager Lite 2.5 NEWS_LOGIN Cookie ADMIN Parameter Manipulation Admin Authentication Bypass

No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...

CVE-2004-1846

CVE-2004-1846 affects News Manager Lite 2.5 with multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp. The sources provided reiterate this vulnerability...

CVE-2004-1845

News Manager Lite 2.5 is affected by multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary script/HTML via specific user-supplied parameters: (1) email in comment_add.asp, (2) search in search.asp, and (3) n in category_news_headline.asp. The CVE entry notes these ...

CVE-2004-1847

News Manager Lite 2.5 is affected by an authentication bypass vulnerability where an attacker can set the ADMIN parameter in the NEWS_LOGIN cookie to gain administrator privileges. The CVE entry, NVD, and CVE record confirm this issue as a credential bypass affecting News Manager Lite 2.5; no roo...

CVE-2004-1846

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the 1 ID parameter to more.asp, 2 ID parameter to categorynews.asp, or 3 filter parameter to newssort.asp...

CVE-2004-1845

Multiple cross-site scripting XSS vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to commentadd.asp, 2 search parameter to search.asp, or 3 n parameter to categorynewsheadline.asp...

Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration

Title: Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration. Software: News Manager Lite 2.5 & News Manager Lite administration. Vendor: http://www.expinion.net/software/appnewsmanager.asp Impact: Disclosure of authentication information, Disclosure of user information,...

newsmanlite25.txt

Title: Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration. Software: News Manager Lite 2.5 & News Manager Lite administration. Vendor: http://www.expinion.net/software/appnewsmanager.asp Impact: Disclosure of authentication information, Disclosure of user information,...

CVE-2004-1846

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the 1 ID parameter to more.asp, 2 ID parameter to categorynews.asp, or 3 filter parameter to newssort.asp...

CVE-2004-1847

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWSLOGIN cookie...

Expinion.net News Manager Lite 2.5 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'NEWS_LOGIN?admin' Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

CVE-2000-0689

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...

CVE-2000-0689

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...

CVE-2000-0689

CVE-2000-0689 affects Account Manager LITE. The vulnerability arises because authentication is not properly enforced when attempting to change the administrator password via the amadmin.pl script with the setpasswd parameter, allowing remote attackers to gain privileges. The connected documents c...