Virtuemart
Approved changes feed: RSS · Atom
cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Virtuemart (6fddb4da-0a7a-5032-b6bc-21299a7988b0) |
|---|---|
| Product | Virtuemart (8a5a8119-c32b-520c-9100-d6afc8ae9ac1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6002 |
vulnerable | 2026-06-08 07:43:13.946003 |
VirtueMart - Unrestricted File Upload
HIGH (7.2)
An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution or other security impacts depending on server configuration.
Published: 2025-06-11T16:26:47.283Z
Updated: 2025-06-11T17:29:01.082Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6001 |
vulnerable | 2026-06-08 07:43:13.945541 |
VirtueMart - Cross Site Request Forgery (CSRF)
HIGH (8.3)
A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager.
Published: 2025-06-11T16:26:25.896Z
Updated: 2025-06-11T17:49:41.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7205 |
vulnerable | 2026-06-08 04:51:05.950261 |
Details available
Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file.
Published: 2009-09-11T16:00:00.000Z
Updated: 2024-08-07T11:56:14.485Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7204 |
vulnerable | 2026-06-08 04:51:05.944961 |
Details available
Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2009-09-11T16:00:00.000Z
Updated: 2024-08-07T11:56:14.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5563 |
vulnerable | 2026-06-08 04:50:06.378037 |
Details available
Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vectors.
Published: 2007-10-18T20:00:00.000Z
Updated: 2024-08-07T15:39:12.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3247 |
vulnerable | 2026-06-08 04:49:53.520241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1361 |
vulnerable | 2026-06-08 04:49:42.227545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1096 |
vulnerable | 2026-06-08 04:49:41.468831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4829 |
vulnerable | 2026-06-08 04:48:45.290554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.