← Database

CVE-2008-2012

HIGH CVSS: 7.5 Published: 2008-04-30 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action.

Affected Platforms

Postnuke Software Foundation Postschedule

Weakness Type

CWE-89

References