medium6.5Public exploit code
CVE-2009-2393
admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unkno…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Virtue Online Test Generator - Authentication Bypass / SQL Injection / Cross-Site Scripting2009-06-26 · webapps · php · Verified
Impact
admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virtuenetz | Virtue Online Test Generator | All versions |