Virtuenetz

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Virtuenetz records in CISA KEV

No Virtuenetz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Virtue Online Test Generator 3 records LOW Virtue Book Store 2 records LOW Virtue News Manager 2 records LOW Virtue Shopping Mall 2 records LOW Virtue Classifieds 1 record LOW

Records

3 records in Virtue Online Test Generator · all components

TI-2009-02282 CVE-2009-2392 · GHSA-fwmx-4jwq-vm4w

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows…

LOW 35

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-07-09 No fix listed CWE-89

TI-2009-02283 CVE-2009-2393 · GHSA-mqcc-6c28-c652

admin/index.php in Virtuenetz Virtue Online Test Generator does not require…

LOW 33

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02057 Published 2009-07-09 No fix listed CWE-264

TI-2009-02281 CVE-2009-2391 · GHSA-x36f-m7f6-6mhj

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test…

LOW 23

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2009-07-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	7
Medium	3
Low	0
No CVSS	0