Security Advisory
CVE-2008-1631
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.