Dian Gemilang

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dian Gemilang records in CISA KEV

No Dian Gemilang vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dgnews 3 records LOW Dgbook 2 records LOW

Records

3 records in Dgnews · all components

TI-2007-02900 CVE-2007-2994 · GHSA-53jq-24h8-vh5c

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01163 Published 2007-06-04 No fix listed

TI-2007-00676 CVE-2007-0693 · GHSA-3pvc-g892-vvj8

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…

LOW 33

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01552 Published 2007-05-30 No fix listed

TI-2007-00677 CVE-2007-0694 · GHSA-54cj-jmh6-9jv4

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01968 Published 2007-05-30 No fix listed

Open these records in search →

Critical	0
High	1
Medium	3
Low	1
No CVSS	0