Vulnerabilities

TI-2008-03159 CVE-2008-3298 · GHSA-h383-c583-qjpm

SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows…

LOW 30

SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01479 Published 2008-07-25 No fix listed CWE-94

TI-2008-03158 CVE-2008-3297 · GHSA-439r-h9j7-hfrj

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/cl…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01913 Published 2008-07-25 No fix listed CWE-89

TI-2007-06278 CVE-2007-6581 · GHSA-x9p2-p26g-f9mh

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers…

LOW 35

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03543 Published 2007-12-28 No fix listed CWE-22

Vulnerabilities

Filters

SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows…

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote…

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers…