X-dev

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

X-dev records in CISA KEV

No X-dev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xnews 2 records LOW

Records

2 records

TI-2007-00556 CVE-2007-0569 · GHSA-pfjv-6mj6-g2v8

SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute…

LOW 37

SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02307 Published 2007-01-30 No fix listed

TI-2007-00614 CVE-2007-0630 · GHSA-f53q-xh3c-vvgf

Multiple SQL injection vulnerabilities in the generate_csv function in…

LOW 35

Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01093 Published 2007-01-31 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0