CVEvulnerability
CVE-2008-2340
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) lang parameter to (a) advsearch.php, (b) archive.php, and (c) index.php, and the (2) pid parameter to (d) list_tagitems.php.
Affected configurations
• news manager news manager 2.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/29251 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42461 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5624 www.exploit-db.com
- http://www.securityfocus.com/bid/29251 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42461 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5624 www.exploit-db.com