News Manager Lite
Approved changes feed: RSS · Atom
cpe:2.3:a:expinion.net:news_manager_lite:2.5:*:*:*:*:*:*:*
part: a version: 2.5 update: *
| Vendor | Expinion.Net (9766b70e-0ac5-5688-bd3b-c1d4abefcad5) |
|---|---|
| Product | News Manager Lite (d23551b9-f9a4-59b6-9309-02ed54952012) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1847 |
not_vulnerable | 2026-06-08 04:48:07.835321 |
Details available
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.723Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1846 |
vulnerable | 2026-06-08 04:48:07.835007 |
Details available
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1845 |
vulnerable | 2026-06-08 04:48:07.834576 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.642Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.