← Back

Dgnews

dgnews

Vendor: Dian Gemilang • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-2994
1Dian Gemilang
1Dgnews
Apr 23, 2026
Jun 4, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693.
CVE-2007-0694
1Dian Gemilang
1Dgnews
Apr 23, 2026
May 30, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.
CVE-2007-0693
1Dian Gemilang
1Dgnews
Apr 23, 2026
May 30, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (...Show more
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).Show less