Viart Ltd maintains a narrowly scoped e-commerce platform, Viart Shop Free, that represents a small and specialized product footprint. The observed vulnerability context centers on this single product with classifications that warrant review in the context of web application security fundamentals. Current vulnerability counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Viart Ltd over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-6347MEDIUM PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote at | Dec 13, 2007 | 6.8 | 29 | NO | YES |
CVE-2008-3369HIGH SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter. | Jul 30, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-6758MEDIUM Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for r | Apr 28, 2009 | 6.8 | 26 | NO | YES |
CVE-2007-5364HIGH Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackers to have an unknown impact via direct | Oct 11, 2007 | 10.0 | 25 | NO | NO |
CVE-2008-6765MEDIUM ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter. | Apr 28, 2009 | 5.0 | 23 | NO | YES |
CVE-2009-4548MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the category_id parameter to (1) product | Jan 4, 2010 | 4.3 | 21 | NO | YES |
CVE-2009-4547MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, | Jan 4, 2010 | 4.3 | 21 | NO | YES |
CVE-2008-6757MEDIUM Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_ | Apr 28, 2009 | 4.3 | 21 | NO | YES |
CVE-2006-2980HIGH SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote at | Jun 12, 2006 | 7.5 | 19 | NO | NO |
CVE-2008-6766MEDIUM cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests. | Apr 28, 2009 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Viart Ltd.
Media articles that mention a CVE ID that affects a product developed by Viart Ltd — matched by CVE ID, not by vendor name.