Description
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this is primary to CVE-2006-2678.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Pre News Manager 1.0 - 'id' SQL Injection EDB-5803 · webapps · Jun 13, 2008 · verified
- Pre News Manager 1.0 - SQL Injection EDB-3841 · webapps · May 3, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- prenewsmanager-newsdetail-sql-injection(34035) vdb-entry
- 26077 vdb-entry
- 26079 vdb-entry
- 26074 vdb-entry
- ADV-2006-1990 vdb-entry
- 20284 third-party-advisory
- 20081009 News Manager Remote SQL Injection Vulnerability mailing-list
- 20080615 [ECHO_ADV_97$2008] Pre News Manager <= 1.0 (index.php id) Sql Injection Vulnerability mailing-list
- 5803 exploit
- 26078 vdb-entry
- 26073 vdb-entry
- 26076 vdb-entry
- prenewsmanager-index-sql-injection(43070) vdb-entry
- 26075 vdb-entry
- 20081009 Re: News Manager Remote SQL Injection Vulnerability mailing-list