Skip to content
Noroxi

VirtueMart records

15 published records for vendor virtuemart.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2005-4829
    40Plan

    VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remo

    CriticalCVSS 10.0No exploitEPSS 1%

    virtuemart · virtuemartDec 31, 2005

  • CVE-2007-5563
    30Monitor

    Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vectors.

    HighCVSS 7.5No exploitEPSS 1%

    virtuemart · virtuemartOct 18, 2007

  • CVE-2006-6945
    30Monitor

    SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably

    HighCVSS 7.5No exploitEPSS 1%

    virtuemart · virtuemartJan 19, 2007

  • CVE-2009-4430
    30Monitor

    SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id para

    HighCVSS 7.5Proof of conceptEPSS 0%

    virtuemart · virtuemartDec 28, 2009

  • CVE-2006-5096
    28Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition C

    MediumCVSS 6.8Proof of conceptEPSS 2%

    virtuemart · virtuemart joomla ecommerrce edition cmsSep 29, 2006

  • CVE-2016-10379
    28Monitor

    The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote authenticated administrators via the virtuemart_pa

    HighCVSS 7.2No exploitEPSS 1%

    virtuemart · virtuemartMay 29, 2017

  • CVE-2007-0376
    27Monitor

    Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified

    MediumCVSS 6.8No exploitEPSS 1%

    virtuemart · virtuemartJan 19, 2007

  • CVE-2007-3247
    27Monitor

    SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters

    MediumCVSS 6.8No exploitEPSS 1%

    virtuemart · virtuemartJun 18, 2007

  • CVE-2007-1096
    27Monitor

    Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script

    MediumCVSS 6.8No exploitEPSS 1%

    virtuemart · virtuemartFeb 26, 2007

  • CVE-2008-7204
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of ad

    MediumCVSS 6.8No exploitEPSS 0%

    virtuemart · virtuemartSep 11, 2009

  • CVE-2018-7465
    22Monitor

    An XSS issue was discovered in VirtueMart before 3.2.14.

    MediumCVSS 5.4Proof of conceptEPSS 2%

    virtuemart · virtuemartApr 26, 2018

  • CVE-2015-3619
    21Monitor

    Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attacke

    MediumCVSS 5.4No exploitEPSS 0%

    virtuemart · virtuemartFeb 6, 2018

  • CVE-2007-1361
    17Monitor

    Cross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary

    MediumCVSS 4.3No exploitEPSS 1%

    virtuemart · virtuemartMar 8, 2007

  • CVE-2008-7205
    17Monitor

    Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary file

    MediumCVSS 4.3No exploitEPSS 1%

    virtuemart · virtuemartSep 11, 2009

  • CVE-2025-25228
    15Monitor

    Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla

    LowCVSS 3.8No exploitEPSS 0%

    virtuemart · virtuemartApr 21, 2025