CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6120

SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the comment_secure parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.0%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2008-6120

Socialengine » Socialengine » Version: N/A

cpe:2.3:a:socialengine:socialengine:-
Socialengine » Socialengine » Version: 1.0

cpe:2.3:a:socialengine:socialengine:1.0
Socialengine » Socialengine » Version: 1.1

cpe:2.3:a:socialengine:socialengine:1.1
Socialengine » Socialengine » Version: 1.4

cpe:2.3:a:socialengine:socialengine:1.4
Socialengine » Socialengine » Version: 1.6

cpe:2.3:a:socialengine:socialengine:1.6
Socialengine » Socialengine » Version: 1.7

cpe:2.3:a:socialengine:socialengine:1.7
Socialengine » Socialengine » Version: 1.8

cpe:2.3:a:socialengine:socialengine:1.8
Socialengine » Socialengine » Version: 2.0

cpe:2.3:a:socialengine:socialengine:2.0
Socialengine » Socialengine » Version: 2.1

cpe:2.3:a:socialengine:socialengine:2.1
Socialengine » Socialengine » Version: 2.4

cpe:2.3:a:socialengine:socialengine:2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6120

Products

Pricing

Contact Us