CVE-2011-4808

The vulnerability described for CVE-2011-4808 affects the Joomla!HM Community (com_hmcommunity) component prior to version 1.01. The issue is an SQL injection in the fnd_home action of index.php, exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. All co...

CVE-2011-4809

The CVE-2011-4809 entry concerns the HM Community (com_hmcommunity) component for Joomla! prior to version 1.01. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via profile save task parameters in index.php. Affec...