Approved changes feed: RSS · Atom

cpe:2.3:a:emedia_office_gmbh:cuteflow:2.10.0:*:*:*:*:*:*:*

part: a version: 2.10.0 update: *

VendorEmedia Office Gmbh (010c3b7c-a2ea-5dc6-b209-2e82fcae6fd3)
ProductCuteflow (a4e4b975-e37a-5bfc-a196-112cc122d964)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1631 vulnerable 2026-06-08 04:50:21.168320 Details available
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.
Published: 2008-04-02T17:00:00.000Z
Updated: 2024-08-07T08:32:00.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1630 vulnerable 2026-06-08 04:50:21.167885 Details available
Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/.
Published: 2008-04-02T17:00:00.000Z
Updated: 2024-08-07T08:32:00.336Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.