CVE-2008-3298

SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.

Link	Resource
http://www.socialengine.net/news.php	Patch
http://secunia.com/advisories/31203	Vendor Advisory
http://securityreason.com/securityalert/4035
https://exchange.xforce.ibmcloud.com/vulnerabilities/43959
http://www.securityfocus.com/archive/1/494638/100/0/threaded

Configuration 1

cpe:2.3:a:social_engine:social_engine:1.8:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.4:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.7:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.1:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.0:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.0:online_beta:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:*:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.5:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:1.6:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.1:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.7:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.0:*:*:*:*:*:*:* cpe:2.3:a:social_engine:social_engine:2.4:*:se:*:*:*:*:*

---

Published : 2008-07-25 01:41

Updated : 2018-10-11 08:47

---

NVD link : CVE-2008-3298

Mitre link : CVE-2008-3298

No products.

CWE-94