CVE-2007-0693

no score yetEPSS 1.6%

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2007-05-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dian_gemilang:dgnews

References

http://secunia.com/advisories/25438
http://securityreason.com/securityalert/2740
http://www.netvigilance.com/advisory0022
http://www.osvdb.org/34227
http://www.securityfocus.com/archive/1/469828/100/0/threaded

Check your stack JSON