PatchTheCVE: crea-bookhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-2314: Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disablhttps://patchthecve.com/cve/CVE-2007-2314.htmlhttps://patchthecve.com/cve/CVE-2007-2314.htmlTue, 16 Jun 2026 22:39:20 +0000MEDIUM 6.8: Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to (a) configurer.php, (b) connect.php, (c) delete.php, (d) delete2.php, (e) index.php,CVE-2007-2001: Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier alhttps://patchthecve.com/cve/CVE-2007-2001.htmlhttps://patchthecve.com/cve/CVE-2007-2001.htmlTue, 16 Jun 2026 22:38:43 +0000MEDIUM 6.5: Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3.CVE-2007-2000: Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers https://patchthecve.com/cve/CVE-2007-2000.htmlhttps://patchthecve.com/cve/CVE-2007-2000.htmlTue, 16 Jun 2026 22:38:43 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter.