Login Request a demo
Unscored severity · published Jul 5, 2007
CVE-2007-3584
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PN
Pnphpbb2 · Postnuke Software Foundation
through 1.2i · source: NVD
Affected product
PN
Pnphpbb2
Postnuke Software Foundation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3584
osvdb.org
http://osvdb.org/45777
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35256
www.exploit-db.com
https://www.exploit-db.com/exploits/4147