← Database

CVE-2009-0400

MEDIUM CVSS: 6.8 Published: 2009-02-03 Modified: 2026-06-16

Description

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

Affected Platforms

Socialengine Socialengine

Weakness Type

CWE-89

References