CVE-2008-2343: Undefined Security Weakness

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...