CVE-2009-2017

Vulnerability CVE-2009-2017 affects Virtue Book Store's products.php, where the cid parameter is vulnerable to SQL injection, permitting remote execution of arbitrary SQL commands. Connected sources confirm the vulnerability, with a CVSS-like score of 7.5 (HIGH) and network exposure with low atta...

CVE-2009-2019

CVE-2009-2019 pertains to a SQL injection in Virtue News Manager, specifically in news_detail.php where the nid parameter can be exploited to run arbitrary SQL on the backend. Affected component/file: news_detail.php; vulnerable parameter: nid; underlying issue is a lack of input validation/param...

CVE-2009-2017

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2019

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2009-2016

CVE-2009-2016 is a SQL injection vulnerability in Virtue Shopping Mall. The flaw occurs in products.php via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references (Secunia, Exploit-DB, Vupen) corroborate the vulnerability, with a CVSS v2 base score of 7....

Virtue News (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Virtue News SQL/XSS Multiple Remote Vulnerabilities ===================================================== ------------------------------------------------------------------- Virtue News...

Virtue Shopping Mall SQL Injection

CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/ ID :1 Usuario : adm...

Virtue Classifieds (category) SQL Injection Vulnerability

No description provided by source. CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Virtue Book Store cid Remote SQL Injection Vulnerability ========================================================== CMS : Online Book Store WEB : http://www.virtuenetz.com/book/...

Virtue Book Store - 'cid' SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

Virtue Shopping Mall - 'cid' SQL Injection

CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/ ID :1 Usuario : adm...

Virtue Classifieds (category) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Virtue Classifieds category SQL Injection Vulnerability ========================================================= CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified...

Virtue News XSS / SQL Injection

Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News Multiple Remote Vulnerabilities...

Virtue News (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News...

Virtue Book Store - cid SQL Injection

Virtue Book Store - cid SQL Injection CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php...

Virtue Shopping Mall - cid SQL Injection

Virtue Shopping Mall - cid SQL Injection CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php...

virtue news - SQL Injection Cross-Site Scripting

virtue news - SQL Injection Cross-Site Scripting Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR-------------------------------...

Virtue Shopping Mall (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

Virtue Classifieds - category SQL Injection

Virtue Classifieds - category SQL Injection CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Virtue Shopping Mall (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Virtue Shopping Mall cid Remote SQL Injection Vulnerability ============================================================= CMS : Virtue Shopping Mall WEB :...