CyberSec.Space Logo
Back to CVE Browser

CVE-2006-6945

HIGH
7.5
CVSS Severity Score
EPSS Score0.1650%
EPSS Percentile31.27th
PublishedJan 19, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.

Affected Platforms (CPE)

📦
Virtuemart

Virtuemart

= 1.0.7

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
🔗 http://secunia.com/advisories/24058
🔗 http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607
🔗 http://www.hackers.ir/advisories/festival.txt
🔗 http://www.securityfocus.com/archive/1/459195/100/0/threaded
🔗 http://www.securityfocus.com/bid/22123
🔗 http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
🔗 http://secunia.com/advisories/24058

Related Vulnerabilities

CVE-2005-482910.0

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impac...

CVE-2016-101149.8

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote att...

CVE-2008-64837.5

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase o...

CVE-2007-55637.5

Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vector...