3 matches found
CVE-2008-2351
The provided documents confirm CVE-2008-2351 affects CMS WebManager-Pro, where index.php is vulnerable to multiple SQL injection flaws via the language and menu parameters (lang_id and menu_id). This allows remote attackers to craft queries that may alter or reveal database content. The NVD entry...
CVE-2010-4899
CVE-2010-4899 describes a SQL injection vulnerability in CMS WebManager-Pro via the id parameter in c.php, affecting versions before 8.1. The issue permits remote attackers to execute arbitrary SQL commands, enabling potential data disclosure or modification. Public references corroborate the SQL...
CVE-2010-4900
CVE-2010-4900 is an open redirect vulnerability in CMS WebManager-Pro prior to or including version 8.1, exploitable via a URL supplied in the url parameter of c.php. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. The connec...