CVE-2008-2340 Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php,...
HighCVSS 7.5
EPSS 1.00%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid parameter to (d) list_tagitems.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| news manager | = 2.0 | No fix listed |
References
- 29251 vdb-entry
- newsmanager-multiple-sql-injection(42461) vdb-entry
- 5624 exploit