CVE-2007-3584: SQL Injection
Published Jul 5, 2007
·Updated
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter.
Affected Software
1 affected component
Postnuke Software Foundation Pnphpbb2<=1.2i
Event History
Jul 5, 2007
CVE Published
08:30 PM
Jul 6, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3584?
CVE-2007-3584 is considered to be of high severity due to the possibility of remote SQL injection attacks.
2
How do I fix CVE-2007-3584?
To fix CVE-2007-3584, you should upgrade to a later version of PNphpBB2 that is not vulnerable to SQL injection.
3
What are the potential impacts of CVE-2007-3584?
Exploitation of CVE-2007-3584 allows an attacker to execute arbitrary SQL commands, potentially compromising the database.
4
Which versions of PNphpBB2 are affected by CVE-2007-3584?
CVE-2007-3584 affects PNphpBB2 version 1.2i and earlier.
5
What type of vulnerability is CVE-2007-3584?
CVE-2007-3584 is an SQL injection vulnerability that can be exploited through the order parameter in viewforum.php.