CVE

Id
24050  
CVE No.
CVE-2007-0693  
Status
Candidate  
Description
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234478 24050 CVE-2007-0693 BUGTRAQ:20070528 DGNews version 2.1 SQL Injection Vulnerability  View
234479 24050 CVE-2007-0693 URL:http://www.securityfocus.com/archive/1/archive/1/469828/100/0/threaded  View
234480 24050 CVE-2007-0693 MISC:http://www.netvigilance.com/advisory0022  View
234481 24050 CVE-2007-0693 BID:24201  View
234482 24050 CVE-2007-0693 URL:http://www.securityfocus.com/bid/24201  View
234483 24050 CVE-2007-0693 VUPEN:ADV-2007-1981  View
234484 24050 CVE-2007-0693 URL:http://www.vupen.com/english/advisories/2007/1981  View
234485 24050 CVE-2007-0693 OSVDB:34227  View
234486 24050 CVE-2007-0693 URL:http://www.osvdb.org/34227  View
234487 24050 CVE-2007-0693 SECUNIA:25438  View
234488 24050 CVE-2007-0693 URL:http://secunia.com/advisories/25438  View
234489 24050 CVE-2007-0693 SREASON:2740  View
234490 24050 CVE-2007-0693 URL:http://securityreason.com/securityalert/2740  View
234491 24050 CVE-2007-0693 XF:dgnews-news-sql-injection(34539)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52817 JVNDB-2007-001509 FLIP における SQL インジェクションの脆弱性 Free LAN In(tra|ter)net Portal (FLIP) には、SQL インジェクションの脆弱性が存在します。 CVE-2007-0695 24050 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001509.html  View