EUVD-2007-5538

Malware in sbrugna...

CVE-2025-6001 VirtueMart - Cross Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager...

CVE-2025-6001

CVE-2025-6001 describes a CSRF vulnerability in VirtueMart’s product image upload function that bypasses the CSRF protection token, enabling an attacker to craft a request that results in unrestricted file uploads to the VirtueMart media manager. Affected software is VirtueMart (e-commerce extens...

PT-2025-25228 · Unknown · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart affected versions not specified Description: A Cross-Site Request Forgery CSRF issue exists in the product image upload function of VirtueMart, allowing an attacker to bypass the CSRF protection token. This enables the attacker to...

PT-2025-25229 · Unknown · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart affected versions not specified Description: An issue exists in the Product Image section of the VirtueMart backend, where authenticated attackers can upload files with arbitrary extensions. This could potentially lead to remote co...