Vulnerability Details CVE-2008-7181
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.4%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2008-7181
-
cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.0