CVE-2008-1631 | BDVDB-2026-30047 Detail

Description#

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/3792
http://secunia.com/advisories/29612
http://www.securityfocus.com/archive/1/490305/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/41544

Exploit#

No public exploit known

History#

Version 12008-04-02Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.