CVE-2007-1634: Net Portal Dynamic System

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.

Affected products

• Net Portal Dynamic System Net Portal Dynamic System: up to and including 5.10

Published 2007-03-23. Last modified 2026-06-16.