In a post on the same blog that revealed the Kaspersky SQL injection vulnerability, it is now revealed that the BitDefender site suffers from the same vulnerability. The post shows a successful SQL injection exploit against the BitDefender site, complete with screenshots of customer names, email addresses, postal addresses and phone numbers.
http://hackersblog.org/2009/02/09/hackedbitdefender-portugal-exposes-sensitive-customer-data/
The BitDefender website doesn’t suffer from any vulnerability. Hackersblog talk about an partner website that doesn’t use the BitDefender CMS. The bitdefender.pt website is not created or maintained by bitdefender. As i read on some websites, BitDefender now help the partner to get rid of these vulnerabilities.