CVE-2008-1631

HIGH 7.5CVE-2008-1631 · Published 02/04/2008 · updated 16/06/2026

In short

CVE-2008-1631 is a HIGH (CVSS 7.5) vulnerability affecting cuteflow (emedia office gmbh).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cuteflow emedia_office_gmbh	`= 1.5.0= 2.10.0`	No fix yet

Description

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

References

secunia.com/advisories/29612 · Vendor Advisory
securityreason.com/securityalert/3792
securityfocus.com/archive/1/490305/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/41544

More vulnerabilities in cuteflow

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free