CVE-2009-2016

CVE-2009-2016 is a SQL injection vulnerability in Virtue Shopping Mall. The flaw occurs in products.php via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references (Secunia, Exploit-DB, Vupen) corroborate the vulnerability, with a CVSS v2 base score of 7....

CVE-2010-4908

CVE-2010-4908 is a SQL injection vulnerability in Virtue Shopping Mall, specifically in detail.php where the prodid parameter is exploited to inject arbitrary SQL commands. The connected records confirm the vulnerable component and point to remote execution of SQL through the prodid parameter, in...