Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

social engine social engine vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2008-3298
SocialEngine (SE) prior to 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
Social Engine Social Engine 1.0Social Engine Social Engine 1.1Social Engine Social Engine 2.1Social Engine Social Engine 2.4Social Engine Social Engine 1.4Social Engine Social Engine 1.6Social Engine Social Engine 2.5Social Engine Social Engine 2.7Social Engine Social Engine 1.7Social Engine Social Engine 1.8Social Engine Social EngineSocial Engine Social Engine 2.0
7.5
CVSSv2
CVE-2008-3297
Multiple SQL injection vulnerabilities in SocialEngine (SE) prior to 2.83 allow remote malicious users to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php.
Social Engine Social Engine 2.0Social Engine Social Engine 1.0Social Engine Social Engine 2.1Social Engine Social Engine 2.4Social Engine Social Engine 1.1Social Engine Social Engine 1.4Social Engine Social Engine 2.5Social Engine Social Engine 2.7Social Engine Social Engine 1.6Social Engine Social Engine 1.7Social Engine Social Engine 1.8Social Engine Social Engine
6.4
CVSSv2
CVE-2007-6581
Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the global_lang parameter to (1) header_album.php, (2) header_blog.php, or (3) header_group.php; or (4) admin_header_a...
Social Engine Social Engine 2.0
7.5
CVSSv2
CVE-2006-4645
PHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social BookMarking Engine 0.4.3.34 and previous versions, and possibly 0.4.4.120, allows remote malicious users to execute arbitrary PHP code via a URL in the bm_content parameter.
Akarru Social Bookmarking Engine 0.4.3.2Akarru Social Bookmarking Engine 0.4.3.3Akarru Social Bookmarking Engine 0.4.3.34Akarru Social Bookmarking Engine 0.4.4.120
7.5
CVSSv2
CVE-2006-1051
SQL injection vulnerability in Akarru Social BookMarking Engine prior to 0.4.3.4 allows remote malicious users to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php.
Akarru Social Bookmarking Engine 0.4.3.2Akarru Social Bookmarking Engine 0.4.3.3
6.8
CVSSv2
CVE-2009-0400
SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote malicious users to execute arbitrary SQL commands via the category_id parameter.
Socialengine Socialengine 3.06
NA
CVE-2012-2216
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6720 and CVE-2012-6721. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2012-6720 and CVE-...
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
9.3
CVSSv2
CVE-2018-11776
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or...
Apache Struts
4.3
CVSSv2
CVE-2018-12246
Symantec Web Isolation (WI) 1.11 before 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker can target end users protected by WI with social engineering attacks using crafted URLs for legitimate web sites. A successful attack allows i...
Symantec Web Isolation
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook