| Package | Affected versions | Patched versions |
|---|---|---|
| duamazon | = 3.0= 3.1 | |
| duarticle | = 1.0= 1.1 | |
| duclassified | = 4.0= 4.1= 4.2 | |
| dudirectory | = 3.0= 3.1 | |
| dudirectory pro | = 3.0= 3.1 | |
| dudirectory pro sql | = 3.0= 3.1 | |
| dudownload | = 1.0= 1.1 | |
| dugallery | = 3.0= 3.1= 3.2= 3.3 | |
| dunews | = 1.0= 1.1 | |
| dupaypal | = 3.0= 3.1 | |
| dupaypal pro | = 3.0= 3.1 |
Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free