| Package | Affected versions | Patched versions |
|---|---|---|
| virtuemart | ≤ 1.0.9 |
SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free