CVE-2010-2508

CVE-2010-2508 describes a SQL injection in the 2daybiz Video Community Portal Script, specifically in the file user-profile.php, where the userid parameter can be manipulated by an attacker to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD, Red Hat ad...

CVE-2010-2508: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2010-2458

Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...

CVE-2010-2459

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

CVE-2010-2458

CVE-2010-2458 is an XSS vulnerability in the 2daybiz Video Community Portal Script 1.0, exploitable via the videoid parameter in video.php. The root cause is unsanitized input leading to arbitrary script execution if an attacker injects HTML/script. Public references describe the vulnerability an...

CVE-2010-2459

CVE-2010-2459 describes an SQL injection in the file video.php of the product 2daybiz Video Community Portal Script 1.0 . The vulnerability is triggered via the videoid parameter, allowing remote attackers to execute arbitrary SQL commands. According to NVD, the CVSS v2 vector is AV:N/AC:L/Au:N/C...

CVE-2010-2458: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...

CVE-2010-2459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...