CVE-2007-3247: Undefined Security Weakness

SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATHINFO PHPSELF by virtuemartparser.php...

CVE-2007-1361: Undefined Security Weakness

Cross-site scripting XSS vulnerability in virtuemartparser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue is probably different than CVE-2007-0376...

CVE-2006-6945

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to 1 Itemid, 2 productid, and categoryid parameters as handled in virtuemartparser.php...

CVE-2006-6945: Undefined Security Weakness

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to 1 Itemid, 2 productid, and categoryid parameters as handled in virtuemartparser.php...