CVE-2007-3052

CVE-2007-3052 affects PNphpBB2 (PostNuke) up to version 1.2i and earlier. The vulnerability is an SQL injection in index.php triggered by the c parameter, caused by improper sanitization of user input before using it in a database query in makes_cat_nav_tree() within includes/functions.php. Conse...