VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 6, 2009· Updated Jun 16, 2026

CVE-2008-6419

CVE-2008-6419

Description

Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_profile_download.php, and the (3) catid parameter to social_forum_subcategories.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Socialsitegenerator/Social Site Generator2 versions
    cpe:2.3:a:socialsitegenerator:social_site_generator:2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:socialsitegenerator:social_site_generator:2.0:*:*:*:*:*:*:*
    • (no CPE)range: = 2.0

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.