CVE-2007-3584

Postnuke Software Foundation Pnphpbb2 < 1.2i - SQL Injection

Title source: rule

Description

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Coloss · phpwebappsphp

https://www.exploit-db.com/exploits/4147

View Code ZIP pw:eip

References (3)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35256

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4147

[Third Party Advisory, VDB Entry] http://osvdb.org/45777

Scores

EPSS 0.0068

EPSS Percentile 71.6%

Details

Status published

Products (1)

postnuke_software_foundation/pnphpbb2 < 1.2i

Published Jul 05, 2007

Tracked Since Feb 18, 2026