AI Score
Confidence
Low
EPSS
Percentile
87.8%
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).
secunia.com/advisories/25438
securityreason.com/securityalert/2740
www.netvigilance.com/advisory0022
www.osvdb.org/34227
www.securityfocus.com/archive/1/469828/100/0/threaded
www.securityfocus.com/bid/24201
www.vupen.com/english/advisories/2007/1981
exchange.xforce.ibmcloud.com/vulnerabilities/34539