← Database

CVE-2008-1631

HIGH CVSS: 7.5 Published: 2008-04-02 Modified: 2026-06-16

Description

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

Affected Platforms

Emedia Office Gmbh Cuteflow

Weakness Type

CWE-89

References