CVE-2008-3297

2008-07-25T13:41:00
ID CVE-2008-3297
Type cve
Reporter cve@mitre.org
Modified 2018-10-11T20:47:00

Description

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php.