225 matches found
CVE-2025-6002
CVE-2025-6002 のエクスプロイト このスクリプトは、VirtueMart 4.4.10 CVE-2025-6002 の認証済み任意ファイルアップロードの脆弱性を悪用します。この脆弱性は、次のブログ記事で説明されています: https://blog.blacklanternsecurity.com/p/doomla-zero-days このスクリプトは、指定された認証情報で VirtueMart にログインし、新しい製品を作成して、PHP Web シェルをメディアファイルとしてアップロードします。その後、指定された IP/ポートへのリバースシェルを起動します。 パラメータ:...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 is affected by a reflected XSS in the keyword parameter of the product-variants endpoint. The vulnerability allows an attacker to craft a URL containing a script payload that, when visited by a user, executes arbitrary JavaScript in the victim’s browser and ...
Joomla VirtueMart Shopping-Cart 跨站脚本漏洞
Joomla VirtueMart Shopping-Cart is an open-source e-commerce shopping cart and online store management extension for VirtueMart. Version 4.0.12 of Joomla VirtueMart Shopping-Cart contains a cross-site scripting vulnerability, which stems from improper handling of the keyword parameter. This...
CVE-2023-54362: Improper Neutralization of Input During Web Page Generation
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
EUVD-2025-35938
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
An unauthenticated reflected Cross-Site Scripting (XSS) vulnerability exists in the VirtueMart e-commerce extension for Joomla, affecting versions 1.0.0 through 4.4.10 . This flaw allows an attacker to inject malicious scripts into web pages viewed by other users without requiring authentication....
PT-2025-43737
Name of the Vulnerable Software and Affected Versions VirtueMart versions 1.0.0 through 4.4.10 Description An unauthenticated reflected Cross-Site Scripting XSS issue exists in VirtueMart. This allows an attacker to inject malicious scripts into a vulnerable web page viewed by other users. The...
CVE-2025-55757: Improper Neutralization of Input During Web Page Generation
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
EUVD-2007-0378
Malware in sbrugna...
EUVD-2007-1093
Malware in sbrugna...