CVE-2009-2960

CVE-2009-2960 affects CuteFlow 2.10.3 and 2.11.0_c. The vulnerability is that pages/edituser.php is not properly restricted, allowing remote attackers to modify usernames and passwords via a direct request. The impact is aligned with partial confidentiality and partial integrity, as per CVSS metr...