← Vulnerability feed

Vulnerability record · CVE-2007-3052 · published 6 June 2007

CVE-2007-3052: Postnuke software foundation pnphpbb vulnerability

PPostnuke Software Foundation · Pnphpbb

SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.

7.5 CVSS 2.0 High EPSS 2.5% · top 15.9%
7.5CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/35424
http://secunia.com/advisories/25480 Vendor Advisory
http://www.securityfocus.com/bid/24295
http://www.vupen.com/english/advisories/2007/2037
https://exchange.xforce.ibmcloud.com/vulnerabilities/34668
https://www.exploit-db.com/exploits/4026
http://osvdb.org/35424
http://secunia.com/advisories/25480 Vendor Advisory
http://www.securityfocus.com/bid/24295
http://www.vupen.com/english/advisories/2007/2037
https://exchange.xforce.ibmcloud.com/vulnerabilities/34668
https://www.exploit-db.com/exploits/4026

Track CVE-2007-3052 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-4968Postnuke software foundation pnphpbb vulnerabilityPHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a U…EPSS 9.7%

Source: NIST National Vulnerability Database (record CVE-2007-3052), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.