CVE coverage

CVE-2007-0693

CVSS 6.8 10 detections found

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid SELECT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UNION SELECT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid INSERT	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid DELETE	rev 10	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UPDATE	rev 10	2020-09-11
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid SELECT	rev 7	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UNION SELECT	rev 7	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid INSERT	rev 7	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid DELETE	rev 7	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UPDATE	rev 7	2010-10-21