CVE-2008-3298

SocialEngine SE before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code...

CVE-2008-3297

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...

CVE-2008-3298

SocialEngine (SE) prior to 2.83 is affected. The vulnerability arises from write privileges for templates, enabling remote authenticated administrators to execute arbitrary PHP code. There is no remediation detail provided in the supplied documents. Impact is limited to code execution by privileg...

CVE-2008-3298: Improper Control of Generation of Code

SocialEngine SE before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code...

CVE-2008-3297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...

SocialEngine多个SQL注入漏洞

BUGTRAQ ID: 30342 SocialEngine是基于PHP的社会网络平台，允许在网站上创建社会网络。 在客户端认证期间，include/classuser.php文件没有正确地验证对seuser cookie参数的输入，include/classadmin.php文件没有正确的验证对seadmin参数的输入，这允许远程攻击者执行SQL注入攻击，无需有效的管理员凭据便以管理权限登录；此外SocialEngine没有正确地验证对模板数据的输入便储存到了模板中，远程攻击者可以注入并执行恶意PHP代码，导致完全控制服务器。 Webligo Developments...

SocialEngine SQL注入漏洞

BUGTRAQ ID: 30342 CNCAN ID：CNCAN-2008072301 SocialEngine是一款基于PHP的WEB应用程序。 SocialEngine不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库 Social Engine Social Engine 2.81 Social Engine Social Engine 2.71 Social Engine Social Engine 2.0...

Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw

SECURITY ADVISORY CS-2008-2 Vulnerability: Improper validation of external parameters Vendor: SocialEngine http://www.socialengine.net Affected versions: 2.83 Risk: High I. DESCRIPTION Improper validation of browser cookies leads to complete control over client host. II. BACKGROUND During client...