Cyber Security Analyst Ebrahim Hegazy has found an Avira.com SQL Injection vulnerability. Avira.com is the famous Avira Antivirus vendors web site. Remote attackers can. inject own. SQL commands to breach the database of Av.com vulnerable application and get access to the user data or other data stored in inside the Database. The time line for the Avira vulnerability is: 2013-05-25: Vendor Notification; 2013-06-31: Vendor Fix/Patch; 2013: Vendor fix/patch/2013-06/13: Vendor fixed the flaw in a few days.”]