CVE-2008-6419 - CVE House
Back to Database
Status published High CVE-2008-6419

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0...

Vulnerability Description

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_profile_download.php, and the (3) catid parameter to social_forum_subcategories.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6419

Credits & Attribution

No credits recorded in the NVD database.

References

More from socialsitegenerator

View All →
CVE-2008-6421
PHP remote file inclusion vulnerability in social_game_play.php in Social Site...
High 7.5
CVE-2008-6420
Social Site Generator (SSG) 2.0 allows remote attackers to read...
Medium 5

Affected Vendor

socialsitegenerator

View all reports →

Affected Software

social site generator
Vulnerable Versions:
2.0

Timeline

Official Publish: March 6th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.