Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2007-0693

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Dian Gemilang
Products
Dgnews
CVE-2007-0694

Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Dian Gemilang
Products
Dgnews
CVE-2007-2994

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Dian Gemilang
Products
Dgnews