CVE-2006-2980

Published: Jun 12, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

Affected (3)

Products: Viart Ltd: Viart Shop Free

1 product

Viart Shop Free

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Viart Ltd Viart Shop Free	Version 2.5.5_enterprise
Viart Ltd Viart Shop Free	Version 2.5.5_light
Viart Ltd Viart Shop Free	Version 2.5.5_standard

References (6)

http://www.attrition.org/pipermail/vim/2006-June/000846.html

Source: cve@mitre.org

http://www.codetosell.com/downloads/xss_fix.zip

Source: cve@mitre.org

URL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/27684

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2006-June/000846.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.codetosell.com/downloads/xss_fix.zip

Source: af854a3a-2127-422b-91ae-364da2661108

URL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/27684

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.