Unscored severity · published Apr 30, 2008
CVE-2008-2012
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event…
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Postschedule · Postnuke Software Foundation
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2012
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2012
Exploit
http://www.securityfocus.com/bid/28931
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42010
www.exploit-db.com
https://www.exploit-db.com/exploits/5495