← Database

CVE-2009-2960

HIGH CVSS: 7.5 Published: 2009-08-25 Modified: 2026-06-16

Description

CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request.

Affected Platforms

Cuteflow Cuteflow

Weakness Type

CWE-264

References