National Cyber Awareness System

Vulnerability Summary for CVE-2007-2314

Overview

Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to (a) configurer.php, (b) connect.php, (c) delete.php, (d) delete2.php, (e) index.php, (f) infos.php, (g) membres.php, (h) modif-infos.php, (i) modif-message.php, (j) modif.php, (k) uninstall.php, or (l) uninstall_table.php in admin/, different vectors than CVE-2007-2000. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: SECUNIA

Name: 24862

Type: Advisory

Hyperlink:http://secunia.com/advisories/24862

External Source: OSVDB

Name: 34829

Hyperlink:http://www.osvdb.org/34829

External Source: OSVDB

Name: 34828

Hyperlink:http://www.osvdb.org/34828

External Source: OSVDB

Name: 34827

Hyperlink:http://www.osvdb.org/34827

External Source: OSVDB

Name: 34826

Hyperlink:http://www.osvdb.org/34826

External Source: OSVDB

Name: 34825

Hyperlink:http://www.osvdb.org/34825

External Source: OSVDB

Name: 34824

Hyperlink:http://www.osvdb.org/34824

External Source: OSVDB

Name: 34823

Hyperlink:http://www.osvdb.org/34823

External Source: OSVDB

Name: 34822

Hyperlink:http://www.osvdb.org/34822

External Source: OSVDB

Name: 34821

Hyperlink:http://www.osvdb.org/34821

External Source: OSVDB

Name: 34820

Hyperlink:http://www.osvdb.org/34820

External Source: OSVDB

Name: 34819

Hyperlink:http://www.osvdb.org/34819

External Source: OSVDB

Name: 34818

Hyperlink:http://www.osvdb.org/34818