CVE-2008-3297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...