Social Engine versions 2.7 and below suffer from remote SQL injection and cookie manipulation vulnerabilities.