CVE-2008-7181
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a...
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
Exploit likelihood
What each source reports
NVD Score used
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
- Record
CVE-2008-7181- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
- Record
CVE-2008-7181- Updated
- 2026-11-02
EUVDEUVD-2008-7140 No score
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
- Record
EUVD-2008-7140- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg5m-9mw6-chj4 No score
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a...
Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php.
- Record
GHSA-wg5m-9mw6-chj4- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Butterfly ORGanizer 2.0.0 - Arbitrary Delete (Category/Account) | 2008-06-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-7181 is a high vulnerability (CVSS 7.5) in Butterflymedia Butterfly Organizer, published September 8, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.29%, the 83rd percentile. No source names a fixed version.