CVE-2007-2427

pnFlashGames 1.5 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mehmet Ince · textwebappsphp

https://www.exploit-db.com/exploits/3813

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://osvdb.org/35474

[Exploit] http://www.securityfocus.com/bid/23701

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/33960

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3813

[Third Party Advisory] http://secunia.com/advisories/25043

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1581

Scores

EPSS 0.0154

EPSS Percentile 81.1%

Classification

Status draft

Affected Products (1)

pnflashgames/pnflashgames

Timeline

Published May 02, 2007

Tracked Since Feb 18, 2026