Skip to content
OpenAdvisories

Vendor

SocialEngine

2 known vulnerabilities.

Products

SocialEngine 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41460

    SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall

    SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated r…

    SocialEngine SocialEngine