82 matches found
Virtue Online Test Generator - Authentication Bypass SQL Injection Cross-Site Scripting
Virtue Online Test Generator - Authentication Bypass SQL Injection Cross-Site Scripting +===================================================================================+ | | | Virtue Online Test Generator AB/SQL/XSS Multiple Remote Vulnerabilities | | |...
Virtue Online Test Generator XSS / SQL Injection
+===================================================================================+ | | | Virtue Online Test Generator AB/SQL/XSS Multiple Remote Vulnerabilities | | | +===================================================================================+ | | | Author.: HxH | | Contact:...
Virtue Online Test Generator - Authentication Bypass / SQL Injection / Cross-Site Scripting
+===================================================================================+ | | | Virtue Online Test Generator AB/SQL/XSS Multiple Remote Vulnerabilities | | | +===================================================================================+ | | | Author.: HxH | | Contact:...
Sql injection
SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-2017
SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-2021
SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
Sql injection
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
Sql injection
SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2009-2020
Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
CVE-2009-2019
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
Sql injection
SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-2016
SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-2017
Vulnerability CVE-2009-2017 affects Virtue Book Store's products.php, where the cid parameter is vulnerable to SQL injection, permitting remote execution of arbitrary SQL commands. Connected sources confirm the vulnerability, with a CVSS-like score of 7.5 (HIGH) and network exposure with low atta...
CVE-2009-2020
Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
CVE-2009-2017
SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-2019
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
CVE-2009-2021
SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2009-2020
CVE-2009-2020 affects Virtue News Manager, specifically the news_detail.php component where the nid parameter enables a Cross-Site Scripting (XSS) vulnerability. The underlying issue is an XSS flaw that could allow remote attackers to inject arbitrary JavaScript/HTML. The NVD entry lists a CVSS v...
CVE-2009-2019
CVE-2009-2019 pertains to a SQL injection in Virtue News Manager, specifically in news_detail.php where the nid parameter can be exploited to run arbitrary SQL on the backend. Affected component/file: news_detail.php; vulnerable parameter: nid; underlying issue is a lack of input validation/param...