CVE-2009-2020

CVE-2009-2020 affects Virtue News Manager, specifically the news_detail.php component where the nid parameter enables a Cross-Site Scripting (XSS) vulnerability. The underlying issue is an XSS flaw that could allow remote attackers to inject arbitrary JavaScript/HTML. The NVD entry lists a CVSS v...

CVE-2009-2016

CVE-2009-2016 is a SQL injection vulnerability in Virtue Shopping Mall. The flaw occurs in products.php via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references (Secunia, Exploit-DB, Vupen) corroborate the vulnerability, with a CVSS v2 base score of 7....

CVE-2009-2019

CVE-2009-2019 pertains to a SQL injection in Virtue News Manager, specifically in news_detail.php where the nid parameter can be exploited to run arbitrary SQL on the backend. Affected component/file: news_detail.php; vulnerable parameter: nid; underlying issue is a lack of input validation/param...

Virtue News (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News...

Virtue Book Store - cid SQL Injection

Virtue Book Store - cid SQL Injection CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Virtue Book Store cid Remote SQL Injection Vulnerability ========================================================== CMS : Online Book Store WEB : http://www.virtuenetz.com/book/...

Virtue Classifieds - category SQL Injection

Virtue Classifieds - category SQL Injection CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

virtue news - SQL Injection Cross-Site Scripting

virtue news - SQL Injection Cross-Site Scripting Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR-------------------------------...

Virtue Shopping Mall - cid SQL Injection

Virtue Shopping Mall - cid SQL Injection CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php...

Virtue Shopping Mall (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Virtue Shopping Mall cid Remote SQL Injection Vulnerability ============================================================= CMS : Virtue Shopping Mall WEB :...

Virtue Classifieds (category) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Virtue Classifieds category SQL Injection Vulnerability ========================================================= CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified...

Virtue Classifieds (category) SQL Injection Vulnerability

No description provided by source. CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Virtue News XSS / SQL Injection

Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News Multiple Remote Vulnerabilities...

Virtue Shopping Mall SQL Injection

CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/ ID :1 Usuario : adm...

Virtue News (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Virtue News SQL/XSS Multiple Remote Vulnerabilities ===================================================== ------------------------------------------------------------------- Virtue News...

Virtue Classifieds SQL Injection

CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

Virtue Shopping Mall (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

virtue news - SQL Injection / Cross-Site Scripting

Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News Multiple Remote Vulnerabilities...

Virtue Shopping Mall - 'cid' SQL Injection

CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/ ID :1 Usuario : adm...