Vulnerabilities

TI-2006-03380 CVE-2006-3488 · GHSA-5q7g-mjcf-xgcf

Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows…

LOW 25

Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01197 Published 2006-07-10 No fix listed

TI-2006-03379 CVE-2006-3487 · GHSA-pjw4-j8j8-vf48

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access…

LOW 25

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01197 Published 2006-07-10 No fix listed

TI-2006-03300 CVE-2006-3402 · GHSA-697q-mv69-c69q

SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2006-07-06 No fix listed

Vulnerabilities

Filters

Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows…

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access…

SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute…