← Database

CVE-2008-3298

MEDIUM CVSS: 6.0 Published: 2008-07-25 Modified: 2026-06-16

Description

SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.

Affected Platforms

Social Engine Social Engine

Weakness Type

CWE-94

References