Vulnerability Details CVE-2009-2960
CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.9%
CVSS Severity
CVSS v2 Score 7.5
References