CVE-2008-2816: o2php Oxygen

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbitrary SQL commands via the repquote parameter in a reply action, a different vector than CVE-2006-1572.

Affected products

• o2php Oxygen: version 2.0 only

Published 2008-06-23. Last modified 2026-06-16.