Xnews
X-Dev · 2 CVEs
CVE-2007-0630
HIGH
Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and ea…
Jan 31, 2007
CVE-2007-0569
HIGH
SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the…
Jan 30, 2007
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2007-0630 | Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute… | HIGH | 1.05% | Jan 31, 2007 |
| CVE-2007-0569 | SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action. | HIGH | 2.29% | Jan 30, 2007 |
Showing 1 to 2 of 2 CVEs