CVE-2008-1631

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

Software From Fixed in
emedia_office_gmbh / cuteflow 1.5.0 1.5.0.x
emedia_office_gmbh / cuteflow 2.10.0 2.10.0.x

Details

    • Severity: High
  • CVE: CVE-2008-1631
  • Published: Apr 2, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10