CVE-2007-2314

State: Published
Severity: Not scored
Published: Apr 26, 2007
Updated: Aug 7, 2024
Reserved: Apr 26, 2007

Description

Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to (a) configurer.php, (b) connect.php, (c) delete.php, (d) delete2.php, (e) index.php, (f) infos.php, (g) membres.php, (h) modif-infos.php, (i) modif-message.php, (j) modif.php, (k) uninstall.php, or (l) uninstall_table.php in admin/, different vectors than CVE-2007-2000. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

34819vdb-entry
34820vdb-entry
34825vdb-entry
34829vdb-entry
34827vdb-entry
24862third-party-advisory
34824vdb-entry
34826vdb-entry
34822vdb-entry
34823vdb-entry
34818vdb-entry
34821vdb-entry
34828vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.