medium6.0
CVE-2008-3298
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
Impact
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Social Engine | Social Engine | through 2.81 Versions 1.0, 1.1, 1.4, 1.6, 1.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31203
- http://securityreason.com/securityalert/4035
- http://www.securityfocus.com/archive/1/494638/100/0/threaded
- http://www.socialengine.net/news.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43959
- http://secunia.com/advisories/31203
- http://securityreason.com/securityalert/4035
- http://www.securityfocus.com/archive/1/494638/100/0/threaded
- http://www.socialengine.net/news.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43959