Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee

SigmaWatch

CVE coverage

CVE-2007-2994

CVSS 7.5 10 detections found

View on NVD →

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693.

Detection rules

Source	Rule	Status	Updated
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid SELECT	rev 9	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid UNION SELECT	rev 9	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid INSERT	rev 9	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid DELETE	rev 9	2020-09-11
suricata	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid UPDATE	rev 8	2020-09-03
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid UPDATE	rev 6	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid SELECT	rev 6	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid UNION SELECT	rev 6	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid INSERT	rev 6	2010-10-21
snort	ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php newsid DELETE	rev 6	2010-10-21