CVE-2006-4968

PNphpBB 1.2g is affected by a PHP remote file inclusion vulnerability in includes/functions_admin.php, exploitable via the phpbb_root_path parameter to execute arbitrary PHP code when a URL is supplied. This aligns with CVE-2006-4968 as described by NVD, with a base score of 7.5 (HIGH) and networ...

CVE-2007-3052

CVE-2007-3052 affects PNphpBB2 (PostNuke) up to version 1.2i and earlier. The vulnerability is an SQL injection in index.php triggered by the c parameter, caused by improper sanitization of user input before using it in a database query in makes_cat_nav_tree() within includes/functions.php. Conse...