NuytsTech Security

CVE-2008-3297

by ·

Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php.

Date published : 2008-07-25

http://www.securityfocus.com/bid/30342

http://www.securityfocus.com/archive/1/494638/100/0/threaded

Tags: