CVE-2008-1631
emedia office gmbh cuteflow: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- emedia_office_gmbh:cuteflow