Skip to content
Noroxi

viart records

13 published records for vendor viart.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2007-5364
      41Plan

      Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attack

      CriticalCVSS 10.0No exploitEPSS 2%

      viart · shopping cartOct 10, 2007

    • CVE-2008-3369
      31Monitor

      SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5Proof of conceptEPSS 1%

      viart · viart shopJul 30, 2008

    • CVE-2007-6347
      29Monitor

      PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2,

      MediumCVSS 6.8Proof of conceptEPSS 7%

      viart · cmsDec 13, 2007

    • CVE-2008-6758
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the

      MediumCVSS 6.8Proof of conceptEPSS 0%

      viart · viart shopApr 28, 2009

    • CVE-2008-6765
      21Monitor

      ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name par

      MediumCVSS 5.0Proof of conceptEPSS 2%

      viart · viart shopApr 28, 2009

    • CVE-2008-6766
      20Monitor

      cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a fl

      MediumCVSS 5.0No exploitEPSS 1%

      viart · viart shopApr 28, 2009

    • CVE-2007-5463
      20Monitor

      ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for cer

      MediumCVSS 5.0No exploitEPSS 0%

      viart · shopOct 15, 2007

    • CVE-2009-4548
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3Proof of conceptEPSS 2%

      viart · viart helpdeskJan 4, 2010

    • CVE-2009-4547
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (

      MediumCVSS 4.3Proof of conceptEPSS 1%

      viart · viart cmsJan 4, 2010

    • CVE-2008-6760
      18Monitor

      ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a

      MediumCVSS 4.3No exploitEPSS 1%

      viart · viart shopApr 28, 2009

    • CVE-2008-6757
      17Monitor

      Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbit

      MediumCVSS 4.3Proof of conceptEPSS 1%

      viart · viart shopApr 28, 2009

    • CVE-2008-6759
      17Monitor

      ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_s

      MediumCVSS 4.3No exploitEPSS 1%

      viart · viart shopApr 28, 2009

    • CVE-2006-2979
      11Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, an

      LowCVSS 2.6No exploitEPSS 2%

      viart · shopJun 12, 2006