CVE-2007-2001

Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2007-2001 has a selected CVSS score of 6.5; EIP currently links 1 catalogued exploit.

Description

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBCrea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code ExecutionExploitDB exploitby Xst3nZNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

4