CVE-2007-2001

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3.

🔗 References (6)

• cve@mitrehttp://secunia.com/advisories/24862
• cve@mitrehttp://www.osvdb.org/34817
• cve@mitrehttps://www.exploit-db.com/exploits/3701
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24862
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/34817
• af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/3701