CVE-2008-1631

CVE-2008-1631

EPSS 1.1%

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/29612 http://securityreason.com/securityalert/3792 https://exchange.xforce.ibmcloud.com/vulnerabilities/41544 http://www.securityfocus.com/archive/1/490305/100/0/threaded