High

DATE	CVE	VULNERABILITY TITLE	RISK
2007-04-12	CVE-2007-1979	SQL Injection vulnerability in Bluemoon Inc. PopnupBlog XOOPS Module SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. network low complexity xoops	7.5