CVE-2009-2017

Vulnerability CVE-2009-2017 affects Virtue Book Store's products.php, where the cid parameter is vulnerable to SQL injection, permitting remote execution of arbitrary SQL commands. Connected sources confirm the vulnerability, with a CVSS-like score of 7.5 (HIGH) and network exposure with low atta...

CVE-2010-4923

CVE-2010-4923: SQL injection in Virtue Netz Virtue Book Store (book/detail.php) via the bid parameter. Root cause: unsafely constructed SQL using user input. Impact: allows remote command execution with partial impact on confidentiality, integrity, and availability per NVD CVSS 2.0 base metrics (...