CVE-2007-3052

SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.

Affected products

Pnphpbb2, Postnuke

Postnuke Software Foundation Pnphpbb

≤ 1.2i

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

2.5% (83th percentile)

NVD status

Modified

Published

2007-06-06