CVE-2007-0692

Published May 30, 2007 CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Description
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-0689 DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:26 PM
Reserved
Feb 3, 2007, 12:00 AM
Status
Modified
Published
May 30, 2007, 8:30 PM
Modified
Jun 16, 2026, 10:36 PM