News Manager

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

News Manager records in CISA KEV

No News Manager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

News Manager 3 records LOW

Records

3 records

TI-2008-02247 CVE-2008-2343 · GHSA-fw58-883m-jp62

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive…

LOW 37

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/info.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02371 Published 2008-05-19 No fix listed CWE-264

TI-2008-02244 CVE-2008-2340 · GHSA-jcvp-v93j-r5ch

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-05-19 No fix listed CWE-89

TI-2008-02246 CVE-2008-2342 · GHSA-5466-cwj2-cpv7

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote…

LOW 28

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02672 Published 2008-05-19 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0