PatchTheCVEsocial site generator vulnerabilities and fixes
Recent CVEs affecting social site generator, with upgrade or downgrade steps. 3 tracked.
Also searched as: socialsitegenerator.
social site generator has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-03-06. Highest priority: CVE-2008-6421 (score 53/100).
- CVE-2008-6421 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remo
- CVE-2008-6420 MEDIUM 5.0 DOWNGRADE Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1)
- CVE-2008-6419 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute ar
FAQ
How do I fix social site generator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is social site generator being exploited right now?
None of the tracked social site generator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which social site generator CVE should I patch first?
CVE-2008-6421 currently ranks highest (53/100): PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remo.