CVE-2008-3297

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php.

Link	Resource
http://www.socialengine.net/news.php	Patch
http://www.securityfocus.com/bid/30342
http://secunia.com/advisories/31203	Vendor Advisory
http://securityreason.com/securityalert/4035
https://exchange.xforce.ibmcloud.com/vulnerabilities/43958
http://www.securityfocus.com/archive/1/494638/100/0/threaded

Configuration 1

cpe:2.3:a:social_engine:social_engine:1.8:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.4:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.7:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.1:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.0:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.0:online_beta:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:*:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.5:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.6:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.1:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.7:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.0:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.4:*:se:*:*:*:*:*

---

Published : 2008-07-25 01:41

Updated : 2018-10-11 08:47

---

NVD link : CVE-2008-3297

Mitre link : CVE-2008-3297

No products.

CWE-89