Vulnerability in Viart Ltd Shop Free

CVE-2006-2980

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.

Affected products

Viart_ltd Viart_shop_free — versions 2.5.5_enterprise, 2.5.5_light, 2.5.5_standard
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_VIM)
cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)