Filtered by vendor Cuteflow
Subscribe
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2009-2960 | 1 Cuteflow | 1 Cuteflow | 2018-10-10 | 7.5 HIGH | N/A |
CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request. |