Vulnerabilities

TI-2009-02283 CVE-2009-2393 · GHSA-mqcc-6c28-c652

admin/index.php in Virtuenetz Virtue Online Test Generator does not require…

LOW 33

admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02057 Published 2009-07-09 No fix listed CWE-264

TI-2009-02282 CVE-2009-2392 · GHSA-fwmx-4jwq-vm4w

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows…

LOW 35

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-07-09 No fix listed CWE-89

TI-2009-02281 CVE-2009-2391 · GHSA-x36f-m7f6-6mhj

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test…

LOW 23

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2009-07-09 No fix listed CWE-79

Vulnerabilities

Filters

admin/index.php in Virtuenetz Virtue Online Test Generator does not require…

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows…

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test…