Unscored CVE-2008-1631 EUVD-2008-1632GHSA-xr57-rwcw-5hgw

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the Use…

Published Apr 2, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

References

3792 third-party-advisory
29612 third-party-advisory
20080329 CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities mailing-list
cuteflow-login-sql-injection(41544) vdb-entry