CVE-2004-1846
News Manager Lite 2.5 - SQL Injection via ID or Filter Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1846. PoCs published by Manuel Lopez.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in News Manager Lite 2.5, including SQL injection and account hijacking via cookie manipulation. It includes an example SQLi payload but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
Exploits (3)
The provided text describes multiple vulnerabilities in News Manager Lite 2.5, including SQL injection and account hijacking via cookie manipulation. It includes an example SQLi payload but lacks executable exploit code.
The provided text describes multiple vulnerabilities in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. It includes an example SQL injection payload but lacks executable exploit code.
This is a vulnerability writeup describing SQL injection and other issues in News Manager Lite 2.5. It provides a high-level overview of affected scripts and attack vectors but lacks executable exploit code.