Viart develops a line of e-commerce and content-management products, including its flagship Shop platform and supporting applications such as CMS and helpdesk modules, that are deployed across small to mid-market web storefronts. The recurring vulnerability profile centers on web-application input-handling and file-access weaknesses—particularly cross-site scripting, path traversal, and link-following flaws—that are characteristic of legacy PHP-based platforms where user input sanitization and directory access controls have been focal areas. Defenders should apply Viart's patches promptly to internet-facing instances and monitor for exploitation patterns; live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Viart over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-6347MEDIUM PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote at | Dec 13, 2007 | 6.8 | 29 | NO | YES |
CVE-2008-3369HIGH SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter. | Jul 30, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-6758MEDIUM Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for r | Apr 28, 2009 | 6.8 | 26 | NO | YES |
CVE-2007-5364HIGH Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via direct | Oct 11, 2007 | 10.0 | 25 | NO | NO |
CVE-2008-6765MEDIUM ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter. | Apr 28, 2009 | 5.0 | 23 | NO | YES |
CVE-2009-4548MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the category_id parameter to (1) product | Jan 4, 2010 | 4.3 | 21 | NO | YES |
CVE-2009-4547MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, | Jan 4, 2010 | 4.3 | 21 | NO | YES |
CVE-2008-6757MEDIUM Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_ | Apr 28, 2009 | 4.3 | 21 | NO | YES |
CVE-2006-2980HIGH SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote at | Jun 12, 2006 | 7.5 | 19 | NO | NO |
CVE-2008-6766MEDIUM cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests. | Apr 28, 2009 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Viart.
Media articles that mention a CVE ID that affects a product developed by Viart — matched by CVE ID, not by vendor name.