Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2025-25228

Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

virtuemart.net Virtuemart component for Joomla

Default version status: unaffected

  • 1.0.0-4.4.8affected

References