Vulnerabilities

TI-2008-06113 CVE-2008-6421 · GHSA-58fm-m7hr-hvwc

PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator…

LOW 38

PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.029 Published 2009-03-06 No fix listed CWE-94

TI-2008-06112 CVE-2008-6420 · GHSA-24c6-rq34-hpv4

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the…

LOW 29

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/download.php, and (3) webadmin/download_file.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03559 Published 2009-03-06 No fix listed CWE-200

TI-2008-06111 CVE-2008-6419 · GHSA-566w-r7m4-2234

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01235 Published 2009-03-06 No fix listed CWE-89

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator…

Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the…

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote…