CVE-2007-3584

The CVE-2007-3584 issue affects PNphpBB2 1.2i and earlier used with Postnuke, where the viewforum.php component is vulnerable to SQL injection via the order parameter. The underlying cause is improper input handling in the viewforum.php code, enabling remote attackers to craft SQL statements and ...