Vulnerabilities

TI-2007-02900 CVE-2007-2994 · GHSA-53jq-24h8-vh5c

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01163 Published 2007-06-04 No fix listed

TI-2007-00677 CVE-2007-0694 · GHSA-54cj-jmh6-9jv4

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01968 Published 2007-05-30 No fix listed

TI-2007-00676 CVE-2007-0693 · GHSA-3pvc-g892-vvj8

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…

LOW 33

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01552 Published 2007-05-30 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote…

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute…