Expinion.Net News Manager Lite vulnerabilities
2 known vulnerabilities affecting expinion.net/news_manager_lite.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2004-1846P3HIGHCVSS 7.5PoCv2.52004-03-20
CVE-2004-1846 [HIGH] CVE-2004-1846: Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute ar
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
nvd
CVE-2004-1845P4MEDIUMCVSS 4.3PoCv2.52004-12-31
CVE-2004-1845 [MEDIUM] CVE-2004-1845: Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
nvd