Unscored severity · published May 2, 2007
CVE-2007-2427
SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter
–
CVSS
3.6%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PN
Pnflashgames · Pnflashgames
1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2427
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2427
osvdb.org
http://osvdb.org/35474
secunia.com
http://secunia.com/advisories/25043
Exploit
http://www.securityfocus.com/bid/23701
www.vupen.com
http://www.vupen.com/english/advisories/2007/1581
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33960
www.exploit-db.com
https://www.exploit-db.com/exploits/3813
More from Pnflashgames
–
CVE-2008-2013
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary…