CVE

Id
31748  
CVE No.
CVE-2008-1631  
Status
Candidate  
Description
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments