Virtuenetz

10 CVEs across 5 Virtuenetz products. Browse Virtuenetz vulnerabilities, severities, and proof-of-concept exploits.

Virtuenetz products with known CVEs

ProductCVEs
Virtue Online Test Generator3
Virtue Book Store2
Virtue News Manager2
Virtue Shopping Mall2
Virtue Classifieds1
Virtuenetz CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-49232011-10-09SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter.
CVE-2010-49082011-10-08SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.
CVE-2009-23932009-07-09admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unkno…
CVE-2009-23922009-07-09SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parame…
CVE-2009-23912009-07-09Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML…
CVE-2009-20212009-06-09SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVE-2009-20202009-06-09Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid p…
CVE-2009-20192009-06-09SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter.
CVE-2009-20172009-06-09SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2009-20162009-06-09SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter.