Direct News

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Direct News records in CISA KEV

No Direct News vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Direct News 1 record LOW

Records

1 record

TI-2005-04270 CVE-2005-4527 · GHSA-rq4x-8357-2wpf

Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via (1) the setLang parameter in index.php and (2) unspecified search module parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01162 Published 2005-12-28 No fix listed

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0