Approved changes feed: RSS · Atom

cpe:2.3:a:virtuastore:virtuastore:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorVirtuastore (c4635fce-3d5f-5bad-bbb4-be5ed7dc7908)
ProductVirtuastore (5697b593-b524-5a3b-99bd-49305fdcfdac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3488 vulnerable 2026-06-08 04:49:09.505124 Details available
Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim.
Published: 2006-07-10T22:00:00.000Z
Updated: 2024-09-16T19:20:23.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3487 vulnerable 2026-06-08 04:49:09.504849 Details available
VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.
Published: 2006-07-10T22:00:00.000Z
Updated: 2024-09-16T20:31:55.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3402 vulnerable 2026-06-08 04:49:09.108421 Details available
SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in.
Published: 2006-07-06T20:00:00.000Z
Updated: 2024-08-07T18:30:32.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.