CVE-2007-0630

CVE-2007-0630 describes multiple SQL injection vulnerabilities in the generate_csv function of X-dev xNews 1.3 and earlier. The affected component is generate_csv in classes/class.news.php, with vulnerable parameters (id, from, q). The issue enables remote attackers to execute arbitrary SQL comma...

CVE-2007-0569

CVE-2007-0569 describes a SQL injection in the xNews.php component of xNews 1.3 that allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action. The vulnerability enables database query manipulation and potential data exposure or manipulation from unauthen...