Every CVE whose affected-product data names Duware Dunews, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2005-3976 — CVSS 7.5 (high): SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3)…
CVE-2006-6354 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1)…
CVE-2006-6367 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attackers to execute…