Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1847. PoCs published by Manuel Lopez.
AI-analyzed exploit summary This is a vulnerability writeup describing multiple issues in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. No exploit code is provided, only a description of the vulnerabilities and an example malicious cookie.
Description
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.
Exploits (1)
This is a vulnerability writeup describing multiple issues in News Manager Lite 2.5, including SQL injection, XSS, and account hijacking via cookie manipulation. No exploit code is provided, only a description of the vulnerabilities and an example malicious cookie.