CVE-2009-2391

Virtuenetz Virtue Online Test Generator - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by HxH · textwebappsphp
https://www.exploit-db.com/exploits/9022

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/9022
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51388
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35591

Scores

EPSS 0.0033
EPSS Percentile 55.6%

Details

CWE
CWE-79
Status published
Products (1)
virtuenetz/virtue_online_test_generator
Published Jul 09, 2009
Tracked Since Feb 18, 2026