Virtuemart

Virtuemart

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2007-3247

  • EPSS 0.71%
  • Veröffentlicht 18.06.2007 10:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.

4.3

CVE-2007-1361

  • EPSS 0.41%
  • Veröffentlicht 08.03.2007 22:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue is probably different than CVE-2007-0376.

6.8

CVE-2007-1096

  • EPSS 0.94%
  • Veröffentlicht 26.02.2007 17:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue might overlap CVE-2007-0376.

7.5

CVE-2006-6945

  • EPSS 0.79%
  • Veröffentlicht 19.01.2007 23:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.

6.8

CVE-2007-0376

  • EPSS 1.57%
  • Veröffentlicht 19.01.2007 23:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

10

CVE-2005-4829

  • EPSS 0.39%
  • Veröffentlicht 31.12.2005 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors.