cve/2007/CVE-2007-0693.md
2025-09-29 21:09:30 +02:00

701 B

CVE-2007-0693

Description

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).

POC

Reference

Github

No PoCs found on GitHub currently.