CVE:CVE-2004-1846
CNNVD:CNNVD-200403-090
News Manager Lite 2.5版本存在多个SQL注入漏洞。远程攻击者借助（1）more.asp的ID参数，（2）category_news.asp的ID参数，或（3）news_sort.asp的filter参数执行任意SQL代码。
solution:Upgrade expinion.net news_manager_lite to a higher version than 2.5,and avoid the version 2.5