Security Advisory

CVE-2007-1634

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-03-23 22:00:00

Last updated 2024-08-07 13:06:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.

← Browse all CVEs View on cve.org ↗