Viart

13 CVEs across 9 Viart products. Browse Viart vulnerabilities, severities, and proof-of-concept exploits.

Viart products with known CVEs

ProductCVEs
Viart Shop7
Shop2
Cms1
Helpdesk1
Shop Evaluation1
Shop Free1
Shopping Cart1
Viart Cms1
Viart Helpdesk1
Viart CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-45482010-01-04Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the category_id par…
CVE-2009-45472010-01-04Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id para…
CVE-2008-67662009-04-28cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests.
CVE-2008-67652009-04-28ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter.
CVE-2008-67602009-04-28ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in ca…
CVE-2008-67592009-04-28ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_search.php, which re…
CVE-2008-67582009-04-28Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of…
CVE-2008-67572009-04-28Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or…
CVE-2008-33692008-07-30SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id par…
CVE-2007-63472007-12-13PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3…
CVE-2007-54632007-10-15ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key fi…
CVE-2007-53642007-10-11Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unkn…
CVE-2006-29792006-06-12Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow…