|
|
CVE Reference: CVE-2006-6945 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-6945 |
|
|
Description: SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA24058 MISC http://www.hackers.ir/advisories/festival.txt FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html CONFIRM http://virtuemart.svn.sourceforge.net/viewvc/*checkout*/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/459195/100/0/threaded BID 22123 |
|
| Return to the previous page. |
