CVE-2007-2001

no score yetEPSS 2.0%

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
Published: 2007-04-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

crea-book:crea-book

References

http://secunia.com/advisories/24862
http://www.osvdb.org/34817
https://www.exploit-db.com/exploits/3701
http://secunia.com/advisories/24862
http://www.osvdb.org/34817

Check your stack JSON