Required CVE Record Information
Description
Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid parameter to (d) list_tagitems.php.
References 3 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- securityfocus.com: 29251 vdb-entryx_transferred
- exchange.xforce.ibmcloud.com: newsmanager-multiple-sql-injection(42461) vdb-entryx_transferred
- exploit-db.com: 5624 exploitx_transferred