CVE-2007-2001

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to…

published April 12, 2007

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02022 · 80.7th percentile
Published
2007-04-12T19:00Z
EPSS history
Timeline
  • 12 APR 19:00Z
    Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to…
    cvelistv5