CVE-2008-6121

CRLF injection vulnerability in SocialEngine SE 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie...

Crlf injection

CRLF injection vulnerability in SocialEngine SE 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie...

CVE-2008-6120

CVE-2008-6120 is a published SQL injection vulnerability in SocialEngine (SE) 2.7 and earlier. The flaw exists in profile_comments.php via the comment_secure parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD records a CVSSv2 base score of 7.5 (HIGH) with network atta...

CVE-2008-6121

CVE-2008-6121 describes a CRLF injection vulnerability in SocialEngine versions 2.7 and earlier. The issue allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via the PHPSESSID cookie. Affected software: SocialEngine 2.7 and earlier. Underlying cause: CRLF...

CVE-2008-6120

SQL injection vulnerability in profilecomments.php in SocialEngine SE 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the commentsecure parameter...

CVE-2008-6121

CRLF injection vulnerability in SocialEngine SE 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie...

CVE-2008-6121: Improper Input Validation

CRLF injection vulnerability in SocialEngine SE 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie...

CVE-2008-6120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profilecomments.php in SocialEngine SE 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the commentsecure parameter...

SocialEngine Blog Plugin category_id Parameter SQL Injection

The remote host is running SocialEngine, a PHP-based social network platform. The version of the Blog plugin for SocialEngine installed on the remote host fails to sanitize input to the 'categoryid' parameter of the 'blog.php' script before using it to construct database queries. Regardless of...

Sql injection

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2009-0400

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2009-0400

CVE-2009-0400 is an SQL injection in SocialEngine’s Blog Plugin (blog.php) via the category_id parameter. The vulnerability affects SocialEngine 3.06 trial and allows an unauthenticated remote attacker to manipulate database queries, potentially leading to sensitive information disclosure or data...

CVE-2009-0400

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2009-0400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

SocialEngine category_id SQL注入漏洞

SocialEngine是基于PHP的社会网络平台，允许在网站上创建社会网络。 SocialEngine的Blog功能实现上存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问操作数据库。 SocialEngine的blog.php脚本没有正确地过滤对categoryid参数所传送的输入便用在了SQL查询中，远程攻击者可以通过提交恶意请求执行SQL注入攻击。安装了Blog插件的SocialEngine系统受此漏洞影响。 Webligo Developments SocialEngine 3.x 厂商补丁： Webligo Developments --------------------...

Sql injection

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...

CVE-2008-3297

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...

Code injection

SocialEngine SE before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code...

CVE-2008-3298

SocialEngine SE before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code...

CVE-2008-3297

SocialEngine (SE) is affected by multiple SQL injection vulnerabilities in versions prior to 2.83. The flaws allow remote attackers to inject arbitrary SQL commands via cookies: (1) se_user cookie used with include/class_user.php, or (2) se_admin cookie used with include/class_admin.php. The issu...