CVE-2008-2012: Postnuke Software Foundation Postschedule

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action.

Affected products

Published 2008-04-30. Last modified 2026-06-16.