CVE

Id
31749  
CVE No.
CVE-2008-1632  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pages/edituser.php, the (3) fieldid parameter to pages/editfield.php, and the (4) templateid to pages/edittemplate_step1.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341365 31749 CVE-2008-1632 SECUNIA:29612  View
341366 31749 CVE-2008-1632 URL:http://secunia.com/advisories/29612  View
341367 31749 CVE-2008-1632 XF:cuteflow-multiple-sql-injection(41536)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48983 JVNDB-2008-004293 JV2 Quick Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 JV2 Quick Gallery の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1636 31749 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004293.html  View