CVE-2006-2980

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-12 · updated 2026-06-16

Description

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

Affected products

Viart Ltd Viart Shop Free: 2.5.5_enterprise, 2.5.5_light, 2.5.5_standard

References

http://www.attrition.org/pipermail/vim/2006-June/000846.html
http://www.codetosell.com/downloads/xss_fix.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/27684
http://www.attrition.org/pipermail/vim/2006-June/000846.html
http://www.codetosell.com/downloads/xss_fix.zip
https://exchange.xforce.ibmcloud.com/vulnerabilities/27684

Get alerted when CVE-2006-2980 or the next vulnerability affects your stack