CVE-2007-0569
published 2007-01-30CVE-2007-0569: SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action.
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.18%
80.1th percentile
SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| x-dev | xnews | <= 1.3 | — |
| x-dev | xnews | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pfjv-6mj6-g2v8: SQL injection vulnerability in xNews
ghsa_unreviewed·2022-05-01
CVE-2007-0569 [HIGH] GHSA-pfjv-6mj6-g2v8: SQL injection vulnerability in xNews
SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action.
GHSA
GHSA-f53q-xh3c-vvgf: Multiple SQL injection vulnerabilities in the generate_csv function in classes/class
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-0630 [HIGH] GHSA-f53q-xh3c-vvgf: Multiple SQL injection vulnerabilities in the generate_csv function in classes/class
Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id ASCII
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id ASCII
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id ASCII
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id ASCII"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005162; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UNION SELECT
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UNION SELECT
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UNION SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UNION SELECT"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005159; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mi
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id DELETE
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id DELETE
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id DELETE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id DELETE"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005161; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UPDATE
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UPDATE
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UPDATE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id UPDATE"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005163; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id SELECT
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id SELECT
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id SELECT"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005158; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique
Suricata
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id INSERT
suricata·2010-07-30·CVSS 7.5
CVE-2007-0569 [HIGH] ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id INSERT
ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id INSERT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS xNews SQL Injection Attempt -- xNews.php id INSERT"; flow:established,to_server; http.uri; content:"/xNews.php?"; nocase; content:"id="; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2007-0569; reference:url,www.milw0rm.com/exploits/3216; classtype:web-application-attack; sid:2005160; rev:8; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_10, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique
No writeups or analysis indexed.
http://osvdb.org/32999http://secunia.com/advisories/23954http://www.securityfocus.com/bid/22284https://exchange.xforce.ibmcloud.com/vulnerabilities/31855https://www.exploit-db.com/exploits/3216http://osvdb.org/32999http://secunia.com/advisories/23954http://www.securityfocus.com/bid/22284https://exchange.xforce.ibmcloud.com/vulnerabilities/31855https://www.exploit-db.com/exploits/3216
2007-01-30
Published