Expinion.net » News Manager Lite : Security Vulnerabilities, CVEs,
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
Max CVSS
7.5
EPSS Score
0.68%
Published
2004-03-20
Updated
2017-07-11
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
Max CVSS
4.3
EPSS Score
0.61%
Published
2004-12-31
Updated
2017-07-11
2 vulnerabilities found