Social Site Generator · Social Site Generator · CVE-2008-6421
Name of the Vulnerable Software and Affected Versions:
Social Site Generator (SSG) version 2.0
Description:
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter in the `social game play.php` file.
Recommendations:
For Social Site Generator (SSG) version 2.0, consider restricting access to the `social game play.php` file until a patch is available. As a temporary workaround, avoid using the `path` parameter in the affected file to minimize the risk of exploitation.