Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-0693. PoCs published by laurent gaffie, Jesper Jurcenoks.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in DGNews 2.1, allowing an attacker to read arbitrary files from the server via the `load_file` function. The PoC provides URLs with crafted SQL queries to exploit the vulnerability.
Description
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).
Exploits (2)
This exploit demonstrates an SQL injection vulnerability in DGNews 2.1, allowing an attacker to read arbitrary files from the server via the `load_file` function. The PoC provides URLs with crafted SQL queries to exploit the vulnerability.
This exploit demonstrates an SQL injection vulnerability in DGNews 2.1 by injecting a UNION-based query to extract data from the `news_config` table. The attack leverages unsanitized input in the `catid` parameter.