Browse CVEs

CRITICAL 9.8 CVE-2026-41460 SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input p… Socialengine after 7.8.0 Fix from $2,3002026-04-23 HIGH 8.5 CVE-2026-41461 SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplie… Socialengine after 7.8.0 Fix from $1,9502026-04-23 MEDIUM 6.3 CVE-2012-6721 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4.2.4. Socialengine 4.2.4+ Fix from $1,6002020-02-11 MEDIUM 6.1 CVE-2012-6720 Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via th… Socialengine 4.2.4+ Fix from $1,6002020-02-11 HIGH 7.5 CVE-2008-6120 SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL commands vi… Socialengine after 2.7 Fix from $1,9502009-02-11 HIGH 7.5 CVE-2008-6121 CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response … Socialengine after 2.7 Fix from $1,9502009-02-11 MEDIUM 6.8 CVE-2009-0400 SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id para… Socialengine No fix yet Fix from $1,6002009-02-03