CVE-2006-6945 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-6945
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-6945

Description: SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.

CVE Status: Candidate

References: SAID Secunia Advisory: SA24058 MISC http://www.hackers.ir/advisories/festival.txt FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html CONFIRM http://virtuemart.svn.sourceforge.net/viewvc/checkout/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/459195/100/0/threaded BID 22123

Return to the previous page.