← Database

CVE-2006-6945

HIGH CVSS: 7.5 Published: 2007-01-19 Modified: 2026-06-16

Description

SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) Itemid, (2) product_id, and category_id parameters as handled in virtuemart_parser.php.

Affected Platforms

Virtuemart Virtuemart

Weakness Type

NVD-CWE-Other

References