CVE-2008-3298
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote...
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
Exploit likelihood
What each source reports
NVD Score used
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
- Record
CVE-2008-3298- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
- Record
CVE-2008-3298- Updated
- 2026-11-02
EUVDEUVD-2008-3286 No score
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
- Record
EUVD-2008-3286- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h383-c583-qjpm No score
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote...
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code.
- Record
GHSA-h383-c583-qjpm- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3298 is a medium vulnerability (CVSS 6.0) in Social Engine Engine, published July 25, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. No source names a fixed version.