Virtuemart : Security Vulnerabilities, CVEs, Published In 2009
SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a shop.product_details shop.flypage action.
Max CVSS
7.5
EPSS Score
0.07%
Published
2009-12-28
Updated
2009-12-29
Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file.
Max CVSS
4.3
EPSS Score
0.49%
Published
2009-09-11
Updated
2017-08-17
Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Max CVSS
6.8
EPSS Score
0.16%
Published
2009-09-11
Updated
2017-08-17
3 vulnerabilities found