« Volver al listado

CVE-2008-3298

Estado: ModificadaMedia (6)—

SocialEngine (SE) anterior a 2.83, concede determinados privilegios a las plantillas, lo que permite a los administradores autenticados en remoto ejecutar código PHP de su elección.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Social Engine — Social Engine

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3298",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-07-25T13:41:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/31203",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/4035",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/494638/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.socialengine.net/news.php",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43959",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31203",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/4035",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/494638/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.socialengine.net/news.php",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43959",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arbitrary PHP code."
    },
    {
      "lang": "es",
      "value": "SocialEngine (SE) anterior a 2.83, concede determinados privilegios a las plantillas, lo que permite a los administradores autenticados en remoto ejecutar código PHP de su elección."
    }
  ],
  "lastModified": "2026-06-16T22:55:33.847",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BFEAB14-2D98-42A6-890A-4FD42FF71D77",
              "versionEndIncluding": "2.81"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8E5CF4B-15F0-4C59-ADCA-9CFCDA95280E"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA0580D5-710E-4538-B184-F0105F547D6E"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC8B9651-72B6-4C1B-ACC1-3831A4322332"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6743DDD0-D0D8-4F56-92B0-FD1352403D41"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8441BA19-ACB8-4B7C-8231-51F00777278E"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D293A92-19D5-432F-BF86-B5907EA16E40"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFA7193F-BA13-416C-A29B-C50977C3AD71"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.0:online_beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37C36CEA-CB12-4808-A3E9-38A11987BCD8"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECFAC544-223F-4A4C-B5E6-7D57E6F2CD46"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.4:*:se:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2D15D15-278A-4A06-8C65-1D8BC89D27EA"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C7D38E4-CE4D-4CA4-8022-E6C47C559E86"
            },
            {
              "criteria": "cpe:2.3:a:social_engine:social_engine:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7D6F2A4-47D9-4D5C-A81F-E1316C46113C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}