← Database

CVE-2008-7181

HIGH CVSS: 7.5 Published: 2009-09-08 Modified: 2026-06-16

Description

Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.

Affected Platforms

Butterflymedia Butterfly Organizer

Weakness Type

CWE-264

References