CVE:CVE-2007-3584
CNNVD:CNNVD-200707-081
Postnuke PNphpBB2 1.2i版本及其早期版本的viewforum.php中存在SQL注入漏洞。远程攻击者可以借助order参数，执行任意SQL指令。
solution:Upgrade postnuke_software_foundation pnphpbb2 to a higher version than 1.2i,and avoid the version (,1.2i]