CVE-2007-2427

The CVE-2007-2427 issue affects the pnFlashGames 1.5 module for PostNuke, with the vulnerable component being index.php. The root cause is an SQL injection via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references (e.g., Exploit-DB entry 3813) indicate ...