| Package | Affected versions | Patched versions |
|---|---|---|
| social engine | = 1.0= 1.1= 1.4= 1.6= 1.7= 1.8= 2.0= 2.1= 2.4= 2.5= 2.7≤ 2.81 |
Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an se_user cookie to include/class_user.php or (2) an se_admin cookie to include/class_admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free