high7.5Public exploit code
CVE-2008-2343
News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection2008-05-15 · webapps · php · Verified
Impact
News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to (1) db/connect_str.php and (2) login/info.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| News Manager | News Manager | Version 2.0 |