CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-6945

HIGH
7.5
CVSS Severity Score
EPSS Score0.1650%
EPSS Percentile31.27th
Published2007年1月19日
Last Modified2026年4月23日

Vulnerability Description

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.

Affected Platforms (CPE)

📦
Virtuemart

Virtuemart

= 1.0.7

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
🔗 http://secunia.com/advisories/24058
🔗 http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607
🔗 http://www.hackers.ir/advisories/festival.txt
🔗 http://www.securityfocus.com/archive/1/459195/100/0/threaded
🔗 http://www.securityfocus.com/bid/22123
🔗 http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
🔗 http://secunia.com/advisories/24058

関連する脆弱性情報

CVE-2005-482910.0

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impac...

CVE-2016-101149.8

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote att...

CVE-2008-64837.5

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase o...

CVE-2007-55637.5

Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vector...