CVE-2009-2019

CVE-2009-2019 pertains to a SQL injection in Virtue News Manager, specifically in news_detail.php where the nid parameter can be exploited to run arbitrary SQL on the backend. Affected component/file: news_detail.php; vulnerable parameter: nid; underlying issue is a lack of input validation/param...

CVE-2009-2020

CVE-2009-2020 affects Virtue News Manager, specifically the news_detail.php component where the nid parameter enables a Cross-Site Scripting (XSS) vulnerability. The underlying issue is an XSS flaw that could allow remote attackers to inject arbitrary JavaScript/HTML. The NVD entry lists a CVSS v...