EUVD-2010-4979

Malware in sbrugna...

Sql injection

SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...

CVE-2010-5015

CVE-2010-5015 affects the 2daybiz Network Community Script, with a SQL injection in view_photo.php triggered via the alb parameter. The issue allows remote attackers to alter or retrieve data by crafting input that is not properly sanitized, as stated in the vulnerability description. Connected d...

PT-2011-1950

Name of the Vulnerable Software and Affected Versions 2daybiz Network Community Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the alb parameter in the view photo.php file. Recommendations At the moment,...

CVE-2010-5015: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...

2daybiz Network Community Script SQL Injection / Cross Site Scripting

=========================================================== 2daybiz Network Community Script SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

2daybiz Network Community Script SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications ================================================================== 2daybiz Network Community Script SQL Injection / XSS Vulnerability ==================================================================...

2DayBiz ybiz Network Community Script - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/40913/info 2daybiz Network Community Script is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...