Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Video Community Portal script enables remote SQL command execution

CVE-2011-5215 · published 14 years ago
Summary

The Video Community Portal script (index.php) can be tricked into running unwanted database commands when an attacker supplies a crafted id value. This could let attackers view, modify, or delete data in your database. Apply the vendor's security update or redesign the code to safely handle input as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
2daybiz video_community_portal_script All versions
cpe:2.3:a:2daybiz:video_community_portal_script:-:*:*:*:*:*:*:*
Original advisory text
SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.
SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published25 Oct 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-5215 · NVD
Track software like this
Free during beta