CVEvulnerability
CVE-2008-1631
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.
Affected configurations
• emedia office gmbh cuteflow 1.5.0
• emedia office gmbh cuteflow 2.10.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29612 Vendor Advisory
- http://securityreason.com/securityalert/3792 securityreason.com
- http://www.securityfocus.com/archive/1/490305/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41544 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29612 Vendor Advisory
- http://securityreason.com/securityalert/3792 securityreason.com
- http://www.securityfocus.com/archive/1/490305/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41544 exchange.xforce.ibmcloud.com