Vulnerability in Butterflymedia Butterfly Organizer

CVE-2008-7181

Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

Affected products

Butterflymedia Butterfly_organizer — versions 2.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)