CVE-2007-3584

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter.

Affected products

Pnphpbb2

Postnuke Software Foundation pnphpbb2

≤ 1.2i

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

1.0% (60th percentile)

NVD status

Modified

Published

2007-07-05