CVE-2007-2000

EPSS 1.0%

Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3701unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/24862 https://exchange.xforce.ibmcloud.com/vulnerabilities/33555 https://www.exploit-db.com/exploits/3701 http://www.osvdb.org/34816 http://www.vupen.com/english/advisories/2007/1344