Lucene search
HistoryApr 02, 2008 - 5:44 p.m.
CVE-2008-1631
sql injection
cuteflow
vulnerability
login.php
index.php
security
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.8%
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.
Affected configurations
Node
emedia_office_gmbhcuteflowMatch1.5.0
ORemedia_office_gmbhcuteflowMatch2.10.0
Related
cvelist
cvelist
CVE-2008-1631
2008-04-02 17:00:00
nvd
nvd
CVE-2008-1631
2008-04-02 17:44:00
prion
prion
Sql injection
2008-04-02 17:44:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.8%
Related for CVE-2008-1631