crea-book vulnerabilities and fixes

Recent CVEs affecting crea-book, with upgrade or downgrade steps. 3 tracked.

Also searched as: crea book.

crea-book has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-04-26. Highest priority: CVE-2007-2001 (score 48/100).

• CVE-2007-2314 MEDIUM 6.8 UPGRADE Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabl
• CVE-2007-2001 MEDIUM 6.5 UPGRADE Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier al
• CVE-2007-2000 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers

FAQ

How do I fix crea-book vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is crea-book being exploited right now?

None of the tracked crea-book CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which crea-book CVE should I patch first?

CVE-2007-2001 currently ranks highest (48/100): Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier al.

RSS feed for crea-book · ← Back to latest CVEs