Unscored CVE-2008-6120 EUVD-2008-6090GHSA-hx9w-767h-vrx3

SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL c…

Published Feb 11, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the comment_secure parameter.

References

socialengine-profilecomments-sql-injection(46770) vdb-entry
20081120 Social Engine 2.7 CRLF Injection + SQL injection mailing-list
32382 vdb-entry