CVE-2008-2343

CVE-2008-2343 affects News Manager 2.0, where remote attackers can bypass restrictions and obtain sensitive information by directly requesting (1) db/connect_str.php and (2) login/info.php. The CVSS data shows Network-only access, no user interaction, with Partial confidentiality/integrity/availa...

CVE-2008-2343

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...