CVE-2009-2960

HIGH · CVSS 7.5 EPSS 2.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-08-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-2960

Severity

HIGH

CVSS

7.5

EPSS

2.33%

Original NVD Description

CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request.