CVE-2008-2013

CVE-2008-2013 affects the pnFlashGames module (PostNuke) versions 1.5–2.5. A SQL injection exists in index.php during the display action when magic_quotes_gpc is disabled, enabling an attacker to modify or retrieve database data via the id parameter. The NVD entry reports a base CVSSv2 score of 6...