EUVD-2011-3686

Malware in sbrugna...

Dolphin 'actions.inc.php' SQL Injection Vulnerability

Dolphin is a social networking system. A SQL injection vulnerability exists in Dolphin version 7.3.0. Due to a failure to filter key inputs in actions/inc/php, a remote attacker can execute arbitrary SQL commands via the categorize parameter in a search parameter...

Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...