CVE-2007-2314: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter to a configurer.php, b connect.php, c delete.php, d delete2.php, e index.php, f infos.php,...