CVE-2008-1631: Emedia Office GmbH Cuteflow

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.

Affected products

• Emedia Office GmbH Cuteflow: version 1.5.0 only; version 2.10.0 only

Published 2008-04-02. Last modified 2026-06-16.