Dgnews

dgnews

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-0692 1Dgnews 1Dgnews Apr 23, 2026 May 30, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
CVE-2006-2695 1Dgnews 1Dgnews Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 admin/upprocess.php in DGNews 1.5 and earlier allows remote attackers to execute arbitrary code by uploading scripts with arbitrary extensions to the img directory.