Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
virtuemart virtuemart vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2007-0376
Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Virtuemart Virtuemart 1.0.7
7.5
CVSSv2
CVE-2009-4430
SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote malicious users to execute arbitrary SQL commands via the product_id parameter in a shop.product_details shop.flypage action.
Virtuemart Virtuemart 1.0
1 EDB exploit
7.5
CVSSv2
CVE-2006-6945
SQL injection vulnerability in Virtuemart 1.0.7 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.
Virtuemart Virtuemart 1.0.7
6.8
CVSSv2
CVE-2006-5096
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote malicious users to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_c...
Virtuemart Virtuemart Joomla Ecommerrce Edition Cms
1 EDB exploit
7.5
CVSSv2
CVE-2008-6483
PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for Joomla! allows remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Virtuemart-solutions Com Googlebase 1.1
1 EDB exploit
7.5
CVSSv2
CVE-2016-10114
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension prior to 2.6.1 for Joomla! allows remote malicious users to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.
Awebsupport Aweb Cart Watching System For Virtuemart 2.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2