Vulnerabilities

TI-2008-01564 CVE-2008-1632 · GHSA-29xj-64r9-4j75

Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated…

LOW 35

Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01001 Published 2008-04-02 No fix listed CWE-89

TI-2008-01563 CVE-2008-1631 · GHSA-xr57-rwcw-5hgw

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote…

LOW 35

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2008-04-02 No fix listed CWE-89

TI-2008-01562 CVE-2008-1630 · GHSA-qwgw-cfjm-jx5q

Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittempl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2008-04-02 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated…

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow…