CVE-2007-1634

2007-03-2322:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

JSON

Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.