Vulnerabilities

TI-2008-02247 CVE-2008-2343 · GHSA-fw58-883m-jp62

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive…

LOW 37

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/info.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02371 Published 2008-05-19 No fix listed CWE-264

TI-2008-02246 CVE-2008-2342 · GHSA-5466-cwj2-cpv7

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote…

LOW 28

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02672 Published 2008-05-19 No fix listed CWE-22

TI-2008-02244 CVE-2008-2340 · GHSA-jcvp-v93j-r5ch

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-05-19 No fix listed CWE-89

Vulnerabilities

Filters

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive…

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote…

Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to…