244 matches found
CVE-2026-7170
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...
CVE-2026-7170
The software TPVEnlanube is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue exists in the vendor_store_name parameter of the /administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID] endpoint. An authenticated attacker can exploit this t...
CVE-2025-6002
CVE-2025-6002 のエクスプロイト このスクリプトは、VirtueMart 4.4.10 CVE-2025-6002 の認証済み任意ファイルアップロードの脆弱性を悪用します。この脆弱性は、次のブログ記事で説明されています: https://blog.blacklanternsecurity.com/p/doomla-zero-days このスクリプトは、指定された認証情報で VirtueMart にログインし、新しい製品を作成して、PHP Web シェルをメディアファイルとしてアップロードします。その後、指定された IP/ポートへのリバースシェルを起動します。 パラメータ:...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 is affected by a reflected XSS in the keyword parameter of the product-variants endpoint. The vulnerability allows an attacker to craft a URL containing a script payload that, when visited by a user, executes arbitrary JavaScript in the victim’s browser and ...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
Joomla VirtueMart Shopping-Cart 跨站脚本漏洞
Joomla VirtueMart Shopping-Cart is an open-source e-commerce shopping cart and online store management extension for VirtueMart. Version 4.0.12 of Joomla VirtueMart Shopping-Cart contains a cross-site scripting vulnerability, which stems from improper handling of the keyword parameter. This...
CVE-2023-54362: Improper Neutralization of Input During Web Page Generation
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
EUVD-2025-35938
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
PT-2025-43737
Name of the Vulnerable Software and Affected Versions VirtueMart versions 1.0.0 through 4.4.10 Description An unauthenticated reflected Cross-Site Scripting XSS issue exists in VirtueMart. This allows an attacker to inject malicious scripts into a vulnerable web page viewed by other users. The...
CVE-2025-55757: Improper Neutralization of Input During Web Page Generation
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...