CVE-2025-6001

CVE-2025-6001 describes a CSRF vulnerability in VirtueMart’s product image upload function that bypasses the CSRF protection token, enabling an attacker to craft a request that results in unrestricted file uploads to the VirtueMart media manager. Affected software is VirtueMart (e-commerce extens...

VirtueMart 代码问题漏洞

VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! VirtueMart suffers from a code issue vulnerability that stems from an insufficient file upload limit that could lead to remote code execution...

PT-2025-25229 · Unknown · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart affected versions not specified Description: An issue exists in the Product Image section of the VirtueMart backend, where authenticated attackers can upload files with arbitrary extensions. This could potentially lead to remote co...

VirtueMart 跨站请求伪造漏洞

VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! A security vulnerability exists in VirtueMart that stems from a cross-site request forgery protection bypass that could lead to arbitrary file uploads...

PT-2025-25228 · Unknown · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart affected versions not specified Description: A Cross-Site Request Forgery CSRF issue exists in the product image upload function of VirtueMart, allowing an attacker to bypass the CSRF protection token. This enables the attacker to...

CVE-2005-4829

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...

CVE-2025-25228

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...

CVE-2025-25228

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...

CVE-2025-25228

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...

CVE-2025-25228 Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...

CVE-2025-25228

CVE-2025-25228 affects VirtueMart for Joomla (versions 1.0.0–4.4.7). A backend SQL injection in the product management area allows authenticated administrators to execute arbitrary SQL commands. Practical impact is data access/manipulation in the VirtueMart backend. Remediation cited in PT-2025-1...

CVE-2025-25228 Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...

VirtueMart 安全漏洞

VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! A security vulnerability exists in VirtueMart versions 1.0.0 through 4.4.7, which stems from a SQL injection in the product management area that could result in the...

PT-2025-17429 · Joomla · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart component versions 1.0.0 through 4.4.7 for Joomla Description: A SQL injection in the VirtueMart component for Joomla allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands in the product...

Joomla VirtueMart Shopping Cart 4.0.12 - Reflected XSS

Exploit Title: Joomla VirtueMart Shopping-Cart 4.0.12 - Reflected XSS Exploit Author: CraCkEr Date: 24/07/2023 Vendor: VirtueMart Team Vendor Homepage: https://www.virtuemart.net/ Software Link: https://demo.virtuemart.net/ Joomla Extension Link:...

Joomla VirtueMart Shopping Cart 4.0.12 - Reflected XSS Vulnerability

Exploit Title: Joomla VirtueMart Shopping-Cart 4.0.12 - Reflected XSS Exploit Author: CraCkEr Vendor: VirtueMart Team Vendor Homepage: https://www.virtuemart.net/ Software Link: https://demo.virtuemart.net/ Joomla Extension Link:...

Joomla VirtueMart 2.6.12.2 SQL Injection

==================================================================================================================================== | Title : Joomla VirtueMart v2.6.12.2 SQL Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

Joomla VirtueMart Shopping-Cart 4.0.12 Cross Site Scripting

Exploit Title: Joomla VirtueMart Shopping-Cart 4.0.12 - Reflected XSS Exploit Author: CraCkEr Date: 24/07/2023 Vendor: VirtueMart Team Vendor Homepage: https://www.virtuemart.net/ Software Link: https://demo.virtuemart.net/ Joomla Extension Link:...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

Exploit Title : Joomla Furniture Virtuemart Templates 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : ordasoft.com Software Download Link : ordasoft.com/download-furniture-joomla-virtuemart-template Software...

Joomla VirtueMart 3.4.1 SQL Injection

Exploit Title : Joomla VirtueMart 3.4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : virtuemart.net Software Download Link : virtuemart.net/downloads Software Information Link :...