CVE-2011-5215

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

CVE-2011-5215

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5234

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

CVE-2011-5215

The CVE-2011-5215 entry concerns a SQL injection in index.php of the Video Community Portal. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD, CVE listings) with no a...

CVE-2011-5234

CVE-2011-5234 describes a SQL injection vulnerability in the file user.php of Social Network Community 2, exploitable via the userId parameter to allow remote execution of arbitrary SQL commands. The connected documents confirm the vulnerability type and affected component but do not provide reme...

PT-2012-2192

Name of the Vulnerable Software and Affected Versions Video Community Portal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "index.php" file. This can lead to unauthorized access and manipulation of...

CVE-2011-5234: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

CVE-2011-5215: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-2211

Name of the Vulnerable Software and Affected Versions Social Network Community 2 affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the userId parameter in the "user.php" file. This can lead to unauthorized access and manipulation o...

New Internet Explorer zero-day, Can trigger malware automatically

The new zero day exploit has been discovered and being exploited in the wild. This can be used to load malicious application on victim machines running fully patched Windows XP SP3 along with the latest editions of the IE 7 and IE 8 browser and Adobe's Flash software. Eric Romang was examining on...

Hardening Linux Security in few seconds using "Server Shield"

Are you running Linux just because you think it's safer than Windows? Think again. Sure, security is a built-in feature and extends right from the Linux kernel to the desktop, but it still leaves enough room to let someone muck about with your /home folder. Linux might be impervious to viruses an...

HackerProof : Your Guide To PC Security

With over 140,000 known computer viruses and 85,000,000 spam emails sent out each day, the likelihood of your PC coming into contact with malware such as viruses, worms, and spyware is almost guaranteed. It is very important to secure your computer just like you would secure your house or car. Yo...

#OpJubilee - Anonymous Hackers deface UK police forums

Anonymous Hackers declare another operation name called - ANONYMOUS OPERATION JUBILEE. Under this there will be Rally of Millions people To Parliament, London on 5th of November 2012. As planned this will be a peaceful gathering at the Parliament Building in London to declare the true jubilee. Th...

Windows 8 Security flaw : Logon Passwords Stores in Plain Text

Windows 8 is the first operating system from Microsoft to support alternative non-biometric authentication mechanisms such as Picture Password and PIN. A vulnerability discovered by a password security vendor - "Passcape" in Microsoft's Windows 8 operating system that it saves a log on password i...

Crash with invalid cast when using instanceof operator — Mozilla

Mozilla community member Ms2ger reported a crash due to an invalid cast when using the instanceof operator on certain types of JavaScript objects. This can lead to a potentially exploitable crash...

Malware Signed by Adobe Certificate Only Used in Limited Targeted Attacks

Adobe’s revocation of a code-signing certificate that had been used by attackers to sign several malicious utilities sparked concerns in the security community about widespread malware attacks using those utilities. The key concern was that most antimalware systems will implicitly trust files tha...

Group-Office Calendar SQL Injection

/------------------------------------- | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP file...

SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities

SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control of the software. Version: 6.5.2 Buil...