EUVD-2006-2977

Malware in sbrugna...

CVE-2006-2979

Multiple cross-site scripting XSS vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter in forum.php, which is not properly handled in...

CVE-2006-2980

SQL injection vulnerability in blockforumtopicnew.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forumid parameter...

CVE-2006-2980

SQL injection vulnerability in blockforumtopicnew.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forumid parameter...

CVE-2006-2979

CVE-2006-2979 affects ViArt Shop Free 2.5.5 (and related distributions). The issue is due to cross-site scripting (XSS) via two parameters: the forum_id parameter in forum.php (not properly handled in block_forum_topics.php) and the item_id parameter in reviews.php (not properly handled in block_...