CVE-2007-3247

2007-06-1810:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.4%

JSON

SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.

References

osvdb.org/36889

secunia.com/advisories/25698

sourceforge.net/project/shownotes.php?release_id=516206

virtuemart.net/index.php?option=com_content&task=view&id=250&Itemid=57

www.securityfocus.com/bid/24485

www.vupen.com/english/advisories/2007/2217

exchange.xforce.ibmcloud.com/vulnerabilities/34879