CVE-2007-2314

CVE-2007-2314 : The provided documents describe multiple SQL injection vulnerabilities in Crea-Book 1.0 (and possibly earlier) when magic_quotes_gpc is disabled. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to any of the following ad...