CVE-2008-2012

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action.

Software From Fixed in
postnuke_software_foundation / postschedule 1.0 1.0.x

Details

    • Severity: High
  • CVE: CVE-2008-2012
  • Published: Apr 30, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10