CVE-2004-1845
News Manager Lite 2.5 - Cross-Site Scripting via Email Parameter or Search Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1845. PoCs published by Manuel Lopez.
AI-analyzed exploit summary This is a vulnerability writeup describing multiple issues in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. No actual exploit code is provided, only a description and an example XSS payload.
Description
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
Exploits (3)
This is a vulnerability writeup describing multiple issues in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. No actual exploit code is provided, only a description and an example XSS payload.
The provided text describes multiple vulnerabilities in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. It references specific scripts and parameters but does not include functional exploit code.
This is a vulnerability writeup describing multiple issues in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. No functional exploit code is provided.