Socialengine

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    1
    Critical Level Threats
    3
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-41461

    SocialEngine <= 7.8.0 Blind SSRF via /core/link/preview

    Last Modified: Apr 29, 2026
    Published: Apr 23, 2026

    CVE-2026-41460

    SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall

    Last Modified: Apr 29, 2026
    Published: Apr 23, 2026

    CVE-2012-6720

    Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to music/create, (2) location parameter to events/create, or (3) search parameter to widget/index/content_id/*.

    Last Modified: Nov 21, 2024
    Published: Feb 11, 2020

    CVE-2012-6721

    Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4.2.4.

    Last Modified: Nov 21, 2024
    Published: Feb 11, 2020

    CVE-2013-4898

    Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in public/temporary/timeline/.

    Last Modified: Apr 11, 2025
    Published: Jan 29, 2014
    Items Per Page
    Socialengine Vulnerabilities & Security CVEs | CVE-DB