CVE-2004-1846

Description

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15549

http://secunia.com/advisories/11180

http://marc.info/?l=bugtraq&m=107999733503496&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS