CVE-2005-4829

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1540%

EPSS Percentile38.76th

PublishedDec 31, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors.

Affected Platforms (CPE)

📦

Virtuemart

<= 1.0.0

References & Advisories

🔗 http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692

Related Vulnerabilities

CVE-2016-101149.8

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote att...

CVE-2006-69457.5

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors,...

CVE-2007-55637.5

Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vector...

CVE-2008-64837.5

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase o...