CVE-2008-7181: Butterflymedia Butterfly Organizer

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.

Affected products

• Butterflymedia Butterfly Organizer: version 2.0.0 only

Published 2009-09-08. Last modified 2026-06-16.