high7.5
CVE-2008-1631
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, relat…
Impact
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emedia Office Gmbh | Cuteflow | Versions 1.5.0, 2.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29612
- http://securityreason.com/securityalert/3792
- http://www.securityfocus.com/archive/1/490305/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41544
- http://secunia.com/advisories/29612
- http://securityreason.com/securityalert/3792
- http://www.securityfocus.com/archive/1/490305/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41544