Net Art Media's vulnerability profile centers on its iBoutique e-commerce platform, where the observed issues cluster around SQL injection and related input-handling weaknesses in web-facing components. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Net Art Media over time
Signals from CVEs in this vendor scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-6509HIGH Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated | Jan 24, 2013 | 7.5 | 33 | NO | YES |
CVE-2010-5020HIGH SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. | Nov 2, 2011 | 7.5 | 30 | NO | YES |
CVE-2010-0458HIGH Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) n | Jan 28, 2010 | 7.5 | 30 | NO | YES |
CVE-2012-6508MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1 | Jan 24, 2013 | 6.8 | 29 | NO | YES |
CVE-2009-4613HIGH SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parame | Jan 14, 2010 | 7.5 | 28 | NO | YES |
CVE-2009-4600HIGH SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Email parameter | Jan 12, 2010 | 7.5 | 28 | NO | YES |
CVE-2008-6111HIGH SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the note parameter. | Feb 11, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6042HIGH SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.ph | Feb 3, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6030HIGH Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL commands via (1) the job parameter to index.php in the search | Feb 3, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-0395HIGH SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password para | Feb 3, 2009 | 7.5 | 28 | NO | YES |
Signals from CVEs in this vendor scope (32 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Net Art Media.
Media articles that mention a CVE ID that affects a product developed by Net Art Media — matched by CVE ID, not by vendor name.