CVE-2008-6120

SQL injection vulnerability in profilecomments.php in SocialEngine SE 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the commentsecure parameter...

CVE-2008-6120

CVE-2008-6120 is a published SQL injection vulnerability in SocialEngine (SE) 2.7 and earlier. The flaw exists in profile_comments.php via the comment_secure parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD records a CVSSv2 base score of 7.5 (HIGH) with network atta...