CVE-2009-0400: Socialengine

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

Affected products

• Socialengine Socialengine: version 3.06 only

Published 2009-02-03. Last modified 2026-06-16.