244 matches found
CVE-2025-6002
CVE-2025-6002 익스플로잇 이 스크립트는 VirtueMart 4.4.10 CVE-2025-6002에서 발견된 인증된 임의 파일 업로드 취약점을 악용합니다. 해당 취약점은 이 블로그 게시물에 설명되어 있습니다: https://blog.blacklanternsecurity.com/p/doomla-zero-days 이 스크립트는 제공된 자격 증명으로 VirtueMart에 로그인하고, 새 제품을 생성한 후 미디어 파일로 PHP 웹쉘을 업로드합니다. 그런 다음 제공된 IP/포트로 리버스 셸을 실행합니다. 매개변수: --url:...
CVE-2026-7170
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...
CVE-2026-7170
The software TPVEnlanube is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue exists in the vendor_store_name parameter of the /administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID] endpoint. An authenticated attacker can exploit this t...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2023-54362
Joomla VirtueMart Shopping-Cart 4.0.12 is affected by a reflected XSS in the keyword parameter of the product-variants endpoint. The vulnerability allows an attacker to craft a URL containing a script payload that, when visited by a user, executes arbitrary JavaScript in the victim’s browser and ...
CVE-2023-54362 Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
Joomla VirtueMart Shopping-Cart 跨站脚本漏洞
Joomla VirtueMart Shopping-Cart is an open-source e-commerce shopping cart and online store management extension for VirtueMart. Version 4.0.12 of Joomla VirtueMart Shopping-Cart contains a cross-site scripting vulnerability, which stems from improper handling of the keyword parameter. This...
CVE-2023-54362: Improper Neutralization of Input During Web Page Generation
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
EUVD-2025-35938
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757 Extension - virtuemart.net - XSS in VirtueMart component 1.0.0 - 4.4.10 for Joomla
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...
CVE-2025-55757
VirtueMart (an open source e-commerce extension for Mambo or Joomla!) versions 1.0.0 through 4.4.10 are vulnerable to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into a web page viewed by other users without requi...
PT-2025-43737
Name of the Vulnerable Software and Affected Versions VirtueMart versions 1.0.0 through 4.4.10 Description An unauthenticated reflected Cross-Site Scripting XSS issue exists in VirtueMart. This allows an attacker to inject malicious scripts into a vulnerable web page viewed by other users. The...
CVE-2025-55757: Improper Neutralization of Input During Web Page Generation
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered...