Butterflymedia Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/butterflymedia/ Sun, 26 Feb 2023 09:11:54 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Butterflymedia Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/butterflymedia/ 32 32 CVE-2008-7181 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7181/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7181/ Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.

The post CVE-2008-7181 appeared first on CVE Vulnerability.

]]> Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.

The post CVE-2008-7181 appeared first on CVE Vulnerability.

]]> CVE-2008-6700 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6700/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6700/ Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) mytable parameter to view.php, (2) mytable parameter to viewdb2.php, (3) tablehere parameter to category-rename.php, and (4) letter parameter to module-contacts.php.

The post CVE-2008-6700 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) mytable parameter to view.php, (2) mytable parameter to viewdb2.php, (3) tablehere parameter to category-rename.php, and (4) letter parameter to module-contacts.php.

The post CVE-2008-6700 appeared first on CVE Vulnerability.

]]>