CVE-2008-6120

CVE-2008-6120 is a published SQL injection vulnerability in SocialEngine (SE) 2.7 and earlier. The flaw exists in profile_comments.php via the comment_secure parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD records a CVSSv2 base score of 7.5 (HIGH) with network atta...

CVE-2008-6120

SQL injection vulnerability in profilecomments.php in SocialEngine SE 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the commentsecure parameter...

CVE-2008-6120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profilecomments.php in SocialEngine SE 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the commentsecure parameter...