Vulnerabilities > Expinion NET > News Manager Lite
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2004-12-31 | CVE-2004-1845 | Multiple vulnerability in Expinion.Net News Manager Lite 2.5 Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp. network expinion-net | 4.3 |
| 2004-03-20 | CVE-2004-1847 | Multiple vulnerability in Expinion.net News Manager Lite News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie. | 7.5 |
| 2004-03-20 | CVE-2004-1846 | Multiple vulnerability in Expinion.Net News Manager Lite 2.5 Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp. | 7.5 |