Virtuastore

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Virtuastore records in CISA KEV

No Virtuastore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Virtuastore 3 records LOW

Records

3 records in Virtuastore · all components

TI-2006-03300 CVE-2006-3402 · GHSA-697q-mv69-c69q

SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2006-07-06 No fix listed

TI-2006-03380 CVE-2006-3488 · GHSA-5q7g-mjcf-xgcf

Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows…

LOW 25

Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01197 Published 2006-07-10 No fix listed

TI-2006-03379 CVE-2006-3487 · GHSA-pjw4-j8j8-vf48

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access…

LOW 25

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01197 Published 2006-07-10 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0