CVE-2009-2392

Virtuenetz Virtue Online Test Generator - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by HxH · textwebappsphp
https://www.exploit-db.com/exploits/9022

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51387
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/9022
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35591

Scores

EPSS 0.0024
EPSS Percentile 47.5%

Details

CWE
CWE-89
Status published
Products (1)
virtuenetz/virtue_online_test_generator
Published Jul 09, 2009
Tracked Since Feb 18, 2026