CVE-2007-2427 – PostNuke – pnFlashGames SQL Injection

Description

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.


Vulnerability Information

  • Product / Framework: Pnflashgames
  • Vendor Domain: phpnuke.org
  • Vulnerability Type: SQL Injection
  • CVE Details: View Full CVE Details →