CVE-2009-2392

The vulnerability CVE-2009-2392 affects Virtuenetz Virtue Online Test Generator, specifically the text.php component. It allows SQL injection via the tid parameter, enabling remote attackers to execute arbitrary SQL commands. This is a client/server-side issue in the application’s handling of inp...

CVE-2009-2391

CVE-2009-2391 describes a Cross-site Scripting (XSS) vulnerability in Virtuenetz’s Virtue Online Test Generator, specifically in text.php via the tid parameter. The flaw allows remote attackers to inject arbitrary web script or HTML, enabling potential credential or session data theft if the inje...

CVE-2009-2393

The CVE-2009-2393 entry concerns Virtuenetz Virtue Online Test Generator: admin/index.php does not require administrative privileges, allowing remote authenticated users to have an unknown impact via unspecified vectors. Documented CVSS v2 base score is 6.5 (MEDIUM) with network attack vector, lo...